chore(dependabot): raise semver-patch cooldown to 5 days [skip ci]

[MusaMisto]

chore(dependabot): raise semver-patch cooldown to 5 days

Patch is the only update class that auto-merges with no human
involved, yet carried the shortest cooldown (1 day, a third of
GitHub's 3-day default). Soak time should scale with how little
scrutiny a bump receives, not with how breaking semver claims it is.

Costs nothing in security terms: cooldown never applies to Dependabot
security updates, which still fire immediately.

Propagated from simplify9/.github (dependabot-templates).

[coderabbitai]

📝 Walkthrough

Summary

• Dependabot patch-update cooldown increases from 1 day to 5 days for npm, Docker, and GitHub Actions dependencies.
• Security updates remain immediate and are not affected.
• The change updates .github/dependabot.yml, propagated from simplify9/.github.

Risk: risk:low

Security-sensitive areas: Dependabot update timing. Security updates remain unaffected.

Test coverage impact: No runtime code changes. No additional test coverage is expected.

Operational concerns: Patch updates will be delayed by up to five days. Revert the configuration change if this delay causes unacceptable exposure or maintenance impact.

Walkthrough

Dependabot patch-update cooldowns increase from 1 day to 5 days for npm, Docker, and GitHub Actions updates.

Changes

Dependabot cooldown configuration

Layer / File(s)	Summary
Apply five-day patch cooldowns .github/dependabot.yml	The npm, Docker, and GitHub Actions configurations now delay patch updates for 5 days instead of 1 day.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested labels: infra, risk:high

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly identifies the Dependabot semver-patch cooldown change and its new five-day value.
Description check	✅ Passed	The description explains the five-day patch cooldown and confirms that security updates remain unaffected.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}