chore: add Dependabot cooldown (~3 days)

[MitaliBhalla]

Summary

• Add Dependabot cooldown.default-days: 3 for gomod updates
• Aligns Path B version updates with MintMaker minimumReleaseAge (~3 days) for supply-chain delay
• Does not change schedule, allow-list, or auto-merge workflow

Test plan

• Confirm dependabot.yml validates in GitHub Dependabot settings / next Dependabot run
• Confirm only cooldown was added (no other config drift)

Made with Cursor

Summary by CodeRabbit

• Chores
  • Updated automated dependency update scheduling to wait three days before proposing Go module updates.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 88edd84f-7aae-47ea-8def-a980226347c4

📥 Commits

Reviewing files that changed from the base of the PR and between d19f04a and 0574b96.

📒 Files selected for processing (1)

• .github/dependabot.yml

🚧 Files skipped from review as they are similar to previous changes (1)

• .github/dependabot.yml

---

Walkthrough

The Dependabot configuration for Go modules now delays updates by three days. A comment documents alignment with MintMaker’s minimum release age.

Changes

Dependabot cooldown

Layer / File(s)	Summary
Go module update cooldown .github/dependabot.yml	The gomod update block adds a three-day default cooldown and documents its alignment with MintMaker’s minimum release age.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: matesaary, zmird-r

🚥 Pre-merge checks | ✅ 14 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (14 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the added three-day Dependabot cooldown.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The PR changes only .github/dependabot.yml; it adds no Ginkgo tests or test titles to assess.
Test Structure And Quality	✅ Passed	The pull request changes only .github/dependabot.yml; it adds no Ginkgo tests or cluster operations to review against these requirements.
Microshift Test Compatibility	✅ Passed	The only changed file is .github/dependabot.yml; the diff adds no Ginkgo tests or MicroShift-relevant API usage.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The HEAD commit changes only .github/dependabot.yml; it adds no Ginkgo e2e tests or multi-node assumptions requiring SNO review.
Topology-Aware Scheduling Compatibility	✅ Passed	The commit changes only .github/dependabot.yml by adding cooldown.default-days: 3; it adds no deployment manifests, operators, controllers, or scheduling constraints.
Ote Binary Stdout Contract	✅ Passed	The pull request changes only .github/dependabot.yml; it adds no OTE binary or process-level stdout code.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	The pull request changes only .github/dependabot.yml and adds no Ginkgo e2e tests or network operations, so this check is not applicable.
No-Weak-Crypto	✅ Passed	The commit changes only Dependabot YAML, adding a comment and cooldown.default-days: 3; it introduces no weak crypto algorithm, custom crypto, or secret comparison.
Container-Privileges	✅ Passed	The PR changes only .github/dependabot.yml; no container or Kubernetes manifest and no prohibited privilege setting is introduced.
No-Sensitive-Data-In-Logs	✅ Passed	The PR changes only Dependabot configuration, adding a comment and cooldown; the patch contains no logging code or sensitive data.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}

[MitaliBhalla]

/retest

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: MitaliBhalla
Once this PR has been reviewed and has the lgtm label, please assign petrkotas for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@MitaliBhalla: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.