chore(dependabot): raise semver-patch cooldown to 5 days [skip ci]

[MusaMisto]

chore(dependabot): raise semver-patch cooldown to 5 days [skip ci]

Patch is the only update class that auto-merges with no human
involved, yet carried the shortest cooldown (1 day, a third of
GitHub's 3-day default). Soak time should scale with how little
scrutiny a bump receives, not with how breaking semver claims it is.

Costs nothing in security terms: cooldown never applies to Dependabot
security updates, which still fire immediately.

Propagated from simplify9/.github (dependabot-templates).

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: simplify9/coderabbit/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 4f186a64-3741-4c55-a000-f548ea18685b

📥 Commits

Reviewing files that changed from the base of the PR and between 255d175 and 8e9c92f.

📒 Files selected for processing (1)

• .github/dependabot.yml

📜 Recent review details

🔇 Additional comments (1)

.github/dependabot.yml (1)

14-14: LGTM!

Also applies to: 37-37

---

📝 Walkthrough

Summary

• Increased Dependabot semver-patch cooldowns from 1 day to 5 days for npm and GitHub Actions dependencies.
• Security updates remain unaffected and continue to trigger immediately.
• Change is propagated from simplify9/.github Dependabot templates.

Risk

risk:low

Security-sensitive areas

• Dependabot update timing changed.
• Security update behavior did not change.

Test coverage impact

• No runtime code or tests changed.
• Configuration review is sufficient.

Operational concerns

• Patch updates will be delayed by up to 5 days.
• No migration or deployment changes are required.
• Rollback requires restoring the cooldown values to 1 day.

Walkthrough

Dependabot patch-update cooldowns increase from 1 day to 5 days for npm and GitHub Actions dependencies.

Changes

Dependabot cooldown configuration

Layer / File(s)	Summary
Patch cooldown updates .github/dependabot.yml	The npm and GitHub Actions configurations set semver-patch-days to 5.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Suggested labels: infra, risk:high

Suggested reviewers: samerzughul

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly states that the Dependabot semver-patch cooldown increases to 5 days.
Description check	✅ Passed	The description explains the cooldown change and confirms that security updates remain unaffected.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}