Add Dependabot cooldown and daily schedule

[horgh]

Updates the github-actions Dependabot config to align with the schedule used across our other repos (e.g. GeoIP2-ruby):

• Switches the schedule from weekly to daily at 14:00.
• Adds a 7-day cooldown before update PRs are opened.

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

@horgh, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 36 minutes and 42 seconds. Learn how PR review limits work.

To continue reviewing without waiting, enable usage-based billing in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based credits.

🚦 How do rate limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: e07a85aa-2ae3-4e07-9cc2-19eed056e2eb

📥 Commits

Reviewing files that changed from the base of the PR and between 6cb3fe5 and 3dd0484.

📒 Files selected for processing (1)

• .github/dependabot.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch will/add-dependabot-cooldown

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[gemini-code-assist]

Code Review

This pull request updates the Dependabot configuration in .github/dependabot.yml to run daily at 14:00 and introduces a cooldown configuration. The review feedback correctly points out that cooldown is not a valid configuration option for Dependabot v2 and will cause schema validation to fail, so it should be removed.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

The cooldown option is not a valid configuration option for GitHub Dependabot (dependabot.yml v2). Including invalid keys will cause Dependabot schema validation to fail, preventing any dependency updates from running. Please remove this block.

    schedule:
      interval: daily
      time: '14:00'