Copilot commented on code in PR #20565:
URL: https://github.com/apache/druid/pull/20565#discussion_r4265064214
##########
.github/dependabot.yml:
##########
@@ -45,3 +45,16 @@ updates:
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-patch",
"version-update:semver-minor", "version-update:semver-major"]
+
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ interval: "weekly"
+ cooldown:
+ default-days: 7
Review Comment:
Dependabot’s documented `dependabot.yml` schema (as of Aug 2025) does not
include a `cooldown` key. This will likely be ignored or cause config
validation failures depending on the runner, preventing updates from working as
intended. Consider removing `cooldown` and achieving the delay via process
(e.g., manual review policy), or by implementing an automated PR check/workflow
that blocks/labels Dependabot PRs for action versions released within the last
7 days.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
