From 0ec9ad1b94eccf45adce69f24df9715df91d58bc Mon Sep 17 00:00:00 2001
From: Yuki Fujisaki <kitakore@gmail.com>
Date: Tue, 9 Jun 2026 18:13:35 +0900
Subject: [PATCH] chore(dependabot): add 3-day cooldown for supply-chain safety

---
 .github/dependabot.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5fd18ed..c852ed1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,8 @@
 version: 2
 updates:
   - package-ecosystem: npm
+    cooldown:
+      default-days: 3
     directory: "/"
     schedule:
       interval: weekly
@@ -12,6 +14,8 @@ updates:
         dependency-type: production
 
   - package-ecosystem: github-actions
+    cooldown:
+      default-days: 3
     directory: "/"
     schedule:
       interval: weekly