From cea3b003c1b804f52f59dfd52b83a188a9c8926c Mon Sep 17 00:00:00 2001 From: MiniTiago Date: Wed, 11 Nov 2026 11:46:51 +0000 Subject: [PATCH 1/2] Fix Dependabot minimum schedule interval --- .github/dependabot.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 123ce1fb..0593d542 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,7 +4,8 @@ updates: directory: /releases schedule: interval: cron - cronjob: '19 * * * *' + # Dependabot requires at least 24 hours between checks. + cronjob: '19 0 * * *' versioning-strategy: increase open-pull-requests-limit: 1 allow: From 720d26a0e7986ecaaca2fe8c105aba1d5cbba466 Mon Sep 17 00:00:00 2001 From: MiniTiago Date: Wed, 11 Nov 2026 11:47:49 +0000 Subject: [PATCH 2/2] Document supported daily Dependabot checks --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 1a63c4a2..ac4a9cf1 100644 --- a/README.md +++ b/README.md @@ -103,7 +103,7 @@ npm run check:public Set **Settings > Pages > Source** to **GitHub Actions** and allow deployments from `main` in the `github-pages` environment. -Dependabot checks npm hourly at 19 minutes past the hour (UTC), including weekends, and opens a grouped PR when SDK versions change. The versions in `releases/package.json` are build inputs; user installation examples still use the latest SDK without pins. +Dependabot checks npm daily at 00:19 UTC, including weekends, and opens a grouped PR when SDK versions change. GitHub requires at least 24 hours between Dependabot checks. The versions in `releases/package.json` are build inputs; user installation examples still use the latest SDK without pins. The [publishing workflow](.github/workflows/publish.yml):