From 67f12bbb5e381df1e924e7b3c6d5f98394b9161a Mon Sep 17 00:00:00 2001 From: Ruben van der Linde Date: Mon, 17 Aug 2026 10:04:43 +0200 Subject: [PATCH] =?UTF-8?q?chore(deps):=20correct=20composer=20cooldown=20?= =?UTF-8?q?=E2=80=94=20default-days=201=20to=202,=20add=20conduction/*=20e?= =?UTF-8?q?xclude?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This app's composer entry already had a cooldown block, but with default-days: 1 (below the fleet floor of 2) and no exclude at all — a fresh conduction/* release would have waited the same as any third-party package instead of being exempt. Brings it in line with the fleet-wide floor gate-93 (composer-cooldown-config) enforces, and with this file's own npm entry which already excludes @conduction/*. See ConductionNL/hydra openspec/changes/composer-dependency-cooldown and ADR-093 (proposed, ConductionNL/hydra#591). --- .github/dependabot.yml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index fa03d48f..c5a4bdb2 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -44,6 +44,14 @@ updates: # composer had no entry at all, so the only composer PRs this repo ever saw # were security updates against `main` (e.g. #369, which bumped twig to # 3.27.0 — a version `development` already had). + # + # default-days corrected 1 -> 2 and exclude added: this entry had a cooldown + # window but no first-party exclusion, so a fresh conduction/* release would + # have waited the same one day as any third-party package instead of being + # exempt — the fleet-wide floor gate-93 (composer-cooldown-config) enforces + # is 2 days plus a conduction/* exclude, matching the npm entry above's + # exclude and the fleet's `conduction/hydra-gates` / `conduction/coding-standard` + # first-party dependencies. - package-ecosystem: "composer" directory: "/" target-branch: "development" @@ -51,9 +59,11 @@ updates: interval: "weekly" open-pull-requests-limit: 10 cooldown: - default-days: 1 + default-days: 2 include: - "*" + exclude: + - "conduction/*" - package-ecosystem: "github-actions" directory: "/"