From 1177a3180054126c9715025b06c9fc1218765cb2 Mon Sep 17 00:00:00 2001
From: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:33:13 +0000
Subject: [PATCH 1/4] Add cooldown for Bazel dependency updates

---
 .github/dependabot.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 30cb9833a6a4..41e2ef364ffc 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -45,5 +45,7 @@ updates:
     directory: "/"
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 7
     exclude-paths:
-      - "misc/bazel/registry/**"
+      - "misc/bazel/registry/**"
\ No newline at end of file

From ca53fee1769748da0bc836368b8ff65f51363824 Mon Sep 17 00:00:00 2001
From: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:34:32 +0000
Subject: [PATCH 2/4] Add cooldown for CodeQL GitHub Actions updates

---
 .github/dependabot.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 41e2ef364ffc..6ac4ce534499 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,6 +14,8 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7
     ignore:
       - dependency-name: '*'
         update-types: ['version-update:semver-patch', 'version-update:semver-minor']

From 330e877ade8da081f3695d7be431943b0992e783 Mon Sep 17 00:00:00 2001
From: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:36:42 +0000
Subject: [PATCH 3/4] Add cooldowns to all Dependabot update blocks

---
 .github/dependabot.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6ac4ce534499..82b1759e06c7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,11 +4,15 @@ updates:
     directory: "ruby"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "cargo"
     directory: "ql"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "github-actions"
     directory: "/"
@@ -24,6 +28,8 @@ updates:
     directory: "go/extractor"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7
     allow:
       - dependency-name: "golang.org/x/mod"
       - dependency-name: "golang.org/x/tools"
@@ -38,6 +44,8 @@ updates:
     directory: "go/ql/test"
     schedule:
       interval: "monthly"
+    cooldown:
+      default-days: 7
     ignore:
       - dependency-name: "*"
     reviewers:

From 9af44f97eb5b4d92f9087c475237085dc455ce8a Mon Sep 17 00:00:00 2001
From: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:37:45 +0000
Subject: [PATCH 4/4] Restore trailing newline in Dependabot config

---
 .github/dependabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 82b1759e06c7..ba6cb914193f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -58,4 +58,4 @@ updates:
     cooldown:
       default-days: 7
     exclude-paths:
-      - "misc/bazel/registry/**"
\ No newline at end of file
+      - "misc/bazel/registry/**"