From 94b34a9dee558d2928c87eb75a00fbc6c31da476 Mon Sep 17 00:00:00 2001
From: Stephen Rosen <sirosen@globus.org>
Date: Tue, 16 Jun 2026 11:59:02 -0500
Subject: [PATCH] Add a cooldown to dependabot pypi config

This change only applies to the dependabot config for PyPI packages,
specifically our locked test package data.

Dependabot is already running on these very infrequently, but
- this is flagged by zizmor
- there is no harm in having the cooldown
- in a rare case, it may help
---
 .github/dependabot.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 9477f59db..44aaef713 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -16,5 +16,7 @@ updates:
     directory: "/requirements/"
     schedule:
       interval: "semiannually"
+    cooldown:
+      default-days: 20
     ignore:
       - dependency-name: "*"