From 09a1710917506355bfae2d68f7902986df3377ff Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 5 Jun 2026 09:17:33 +0000
Subject: [PATCH 1/2] chore: add cooldowns to dependabot configuration

---
 .github/dependabot.yml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c682bd2..3b3fbde 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,11 +1,36 @@
+# GitHub Dependabot configuration file
+
 version: 2
 updates:
+  # Use semver-specific cooldowns to reduce noise from freshly released packages.
+  # Keep patch/minor updates reasonably current with a short delay, but postpone
+  # major-version PRs much longer since we usually only upgrade majors intentionally.
+  # Dependabot security updates are handled separately from version-update cooldowns.
+  # Keep the daily schedule so Dependabot still checks frequently.
+  # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#cooldown
+
+  # Maintain dependencies for GitHub Actions
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "daily"
 
+  # Maintain dependencies for maven
   - package-ecosystem: "maven"
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      semver-patch-days: 3
+      semver-minor-days: 3
+      semver-major-days: 30
+
+  # Maintain dependencies for bundler
+  - package-ecosystem: "bundler"
+    directory: "/_doc"
+    schedule:
+      interval: "daily"
+    cooldown:
+      semver-patch-days: 3
+      semver-minor-days: 3
+      semver-major-days: 30

From 8fee35ed9cc9eca2c861145e396ed09933bb7e24 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 5 Jun 2026 09:31:17 +0000
Subject: [PATCH 2/2] fix: move tycho-version from maven.config to pom.xml
 properties for Dependabot tracking

---
 .mvn/maven.config | 1 -
 pom.xml           | 1 +
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/.mvn/maven.config b/.mvn/maven.config
index ffd736e..515f408 100644
--- a/.mvn/maven.config
+++ b/.mvn/maven.config
@@ -1,4 +1,3 @@
--Dtycho-version=5.0.2
 -s.mvn/settings.xml
 -t.mvn/toolchains.xml
 -T4
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index ad17027..03a3942 100644
--- a/pom.xml
+++ b/pom.xml
@@ -10,6 +10,7 @@
 
   <properties>
     <!-- plugin version -->
+    <tycho-version>5.0.2</tycho-version>
     <artifactory-maven-plugin-version>3.6.1</artifactory-maven-plugin-version>
     <jacoco-maven-plugin-version>0.8.12</jacoco-maven-plugin-version>
     <maven-deploy-plugin-version>3.1.2</maven-deploy-plugin-version>