Skip to content

Chore: [AEA-0000] - Dependabot cooldown#715

Merged
anthony-nhs merged 3 commits intomainfrom
dependabot_cooldown
Mar 27, 2026
Merged

Chore: [AEA-0000] - Dependabot cooldown#715
anthony-nhs merged 3 commits intomainfrom
dependabot_cooldown

Conversation

@anthony-nhs
Copy link
Copy Markdown
Contributor

Summary

  • Routine Change

Details

  • depenadabot cooldown

Copilot AI review requested due to automatic review settings March 27, 2026 11:57
@github-actions
Copy link
Copy Markdown
Contributor

This PR is linked to a ticket in an NHS Digital JIRA Project. Here's a handy link to the ticket:

AEA-0000

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a short “cooldown” period to reduce Dependabot PR churn and introduces an automated workflow for updating the devcontainer version.

Changes:

  • Add cooldown.default-days: 3 to each configured Dependabot ecosystem.
  • Add a scheduled + manually triggered workflow to run the shared “update devcontainer version” reusable workflow.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
.github/dependabot.yml Adds a 3-day cooldown setting to GitHub Actions, pip (Poetry), and npm Dependabot update configs.
.github/workflows/update_dev_container_version.yml New scheduled workflow invoking the shared devcontainer version update workflow.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +1 to +6
name: Update Devcontainer Version

on:
workflow_dispatch:
schedule:
- cron: "0 18 * * 4"
Copy link

Copilot AI Mar 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR title/description focus on Dependabot cooldown, but this file introduces a new scheduled workflow to update the devcontainer version. Please update the PR description to cover this additional change (or split it into a separate PR) so reviewers understand the intent and expected impact.

Copilot uses AI. Check for mistakes.
@sonarqubecloud
Copy link
Copy Markdown

@sonarqubecloud
Copy link
Copy Markdown

@anthony-nhs anthony-nhs merged commit f0eea39 into main Mar 27, 2026
11 checks passed
@anthony-nhs anthony-nhs deleted the dependabot_cooldown branch March 27, 2026 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants