Skip to content

fix(ci): use default-days key for Dependabot cooldown - #9263

Merged
klesh merged 1 commit into
apache:mainfrom
DoDiODev:pr/dependabot-cooldown
Oct 28, 2026
Merged

klesh merged 1 commit into
apache:mainfrom
DoDiODev:pr/dependabot-cooldown

Conversation

@DoDiODev

Copy link
Copy Markdown
Contributor

Summary

Follow-up to #9260. The cooldown block for the github-actions ecosystem
uses default: 4, which is not a valid key. Dependabot rejects the whole
configuration file because of it, so none of the update jobs run anymore.
The supported keys are default-days, semver-major-days,
semver-minor-days, semver-patch-days, include and exclude
(docs).

     cooldown:
-      default: 4
+      default-days: 4

Does this close any open issues?

No issue filed. The regression came in with #9260.

Other Information

Validated .github/dependabot.yml against the SchemaStore Dependabot v2
schema. Before: updates[6].cooldown: Additional properties are not allowed ('default' was unexpected). After: no errors.

The cooldown block added in apache#9260 used 'default', which is not a valid
key. Dependabot rejects the whole configuration, so no update jobs run.
The schema only accepts default-days, semver-{major,minor,patch}-days,
include and exclude.
@klesh
klesh merged commit 928834f into apache:main Oct 28, 2026
8 checks passed
@DoDiODev
DoDiODev deleted the pr/dependabot-cooldown branch October 28, 2026 08:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants