Merge pull request #78 from mackerelio/dependabot-cooldown

added dependabot cooldown

Author: yseto

.github/dependabot.yml

@@ -3,7 +3,11 @@ updates:
 - package-ecosystem: bundler
   directory: "/"
   schedule:
-    interval: weekly
+    interval: daily
     time: "01:00"
     timezone: Asia/Tokyo
   open-pull-requests-limit: 10
+  cooldown:
+    default-days: 5
+    include:
+      - "*"

.github/workflows/ci.yml

@@ -14,8 +14,8 @@ jobs:
         ruby: [2.7, '3.0', 3.1, 3.2, 3.3]
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v4
-    - uses: ruby/setup-ruby@v1
+    - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+    - uses: ruby/setup-ruby@0481980f17b760ef6bca5e8c55809102a0af1e5a # v1.263.0
       with:
         ruby-version: ${{ matrix.ruby }}
         bundler-cache: true # runs 'bundle install' and caches installed gems automatically