Austin McKinley 1f32c00fae ci: add dependabot config with 7-day cooldown ...

Org-wide rollout to help mitigate future supply-chain attacks
(e.g. tanstack Shai-Hulud 2026-05-11). Contact @amckinley for details.

Cooldown delays version-update PRs by 7 days so malicious package
versions that are yanked within hours of publish never reach our
lockfiles. Security updates bypass cooldown.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-12 14:14:37 -07:00

..

ISSUE_TEMPLATE

Update issue templates to take uploads, and fix typo (#10036)

2026-03-11 14:50:35 -05:00

workflows

ci: build link image on push to main (#10471)

2026-05-12 13:07:22 -07:00

dependabot.yml

ci: add dependabot config with 7-day cooldown

2026-05-12 14:14:37 -07:00