chore: enforce 14-day release age before Dependabot updates

[Copilot]

Dependabot was configured with weekly/monthly schedules but no minimum release age gate. This PR adds a global cooldown so update PRs are created only after releases are at least two weeks old.

• What changed

  • Added top-level Dependabot cooldown policy in .github/dependabot.yml:
    • default-days: 14
  • Left all existing ecosystem update entries unchanged (schedules, grouping, labels, PR limits).

• Resulting behavior

  • Dependabot continues running on the same cadence, but filters out releases newer than 14 days.

version: 2
updates:
  # existing update configs...
  cooldown:
    default-days: 14

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
devmagic	Ready	Preview	Aug 4, 2026 12:38pm

[Copilot]

Pull request overview

This PR updates the repository’s Dependabot configuration to delay non-security dependency update PRs until a dependency release is at least 14 days old, reducing churn from very recent releases.

Changes:

• Added cooldown: default-days: 14 to each existing Dependabot updates entry (npm root, npm /www, GitHub Actions, devcontainers, docker).

[greptile-apps]

Greptile Summary

Adds a 14-day Dependabot release-age cooldown to every configured update ecosystem while preserving the existing schedules, groups, labels, and pull-request limits.

• Applies default-days: 14 to both npm workspaces.
• Applies the same cooldown to GitHub Actions, Dev Containers, and Docker updates.

Confidence Score: 5/5

The PR appears safe to merge, with no concrete blocking or independently actionable non-blocking issues identified.

The configuration consistently adds the intended cooldown under each existing Dependabot update entry, and the available repository evidence reveals no reachable configuration or behavioral failure.

Important Files Changed

Filename	Overview
.github/dependabot.yml	Adds the same per-update cooldown policy to all five existing Dependabot configurations without changing their other settings.

_{Reviews (1): Last reviewed commit: "fix: use schema-compatible dependabot co..." | Re-trigger Greptile}