From e7c9f2613427ebf5b7e1c24caa3fa16ee95d81db Mon Sep 17 00:00:00 2001 From: Noah Stapp Date: Fri, 23 Jan 2026 14:56:15 -0500 Subject: [PATCH] Improve dependabot version updates + pin zizmor version --- .github/dependabot.yml | 2 ++ .github/workflows/zizmor.yml | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d8b0bfe..9339002 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,6 +5,8 @@ updates: directory: "/" schedule: interval: "weekly" + cooldown: + default-days: 7 groups: actions: patterns: diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 6acbfc8..534f27b 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -18,4 +18,4 @@ jobs: with: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@1c7106082dbc1753372e3924b7da1b9417011a21 \ No newline at end of file + uses: zizmorcore/zizmor-action@135698455da5c3b3e55f73f4419e481ab68cdd95 # v0.4.1 \ No newline at end of file