Merge pull request #10 from missing-elements/ci/dependabot-own-releases

Take our own releases past Dependabot's three-day wait

Author: alekswebnet

.github/dependabot.yml

@@ -10,6 +10,11 @@ updates:
       tooling:
         patterns: ["*"]
         exclude-patterns: ["@missing-elements/*"]
+    # New versions wait three days, but ours are taken the day they are released: they are what
+    # these pages run. pnpm-workspace.yaml leaves them out of pnpm's age check to match (#9).
+    cooldown:
+      default-days: 3
+      exclude: ["@missing-elements/*"]
   - package-ecosystem: github-actions
     directory: /
     schedule:

pnpm-workspace.yaml

@@ -0,0 +1,7 @@
+# pnpm settings for this site, which is one package, not a workspace.
+#
+# Dependabot holds every new version back three days and runs pnpm with that minimum release age,
+# which then refuses any locked version younger than it. The site pins @missing-elements releases
+# on the day they come out, so they are left out of the age; every other package keeps it (#9).
+minimumReleaseAgeExclude:
+  - "@missing-elements/*"