Merge pull request #1349 from mackerelio/dependabot-cooldown

added dependabot cooldown

Author: yseto

.github/dependabot.yml

@@ -7,7 +7,7 @@ updates:
       - "/mackerel-plugin-mysql"
       - "/mackerel-plugin-json"
     schedule:
-      interval: weekly
+      interval: daily
       time: "01:00"
       timezone: Asia/Tokyo
     open-pull-requests-limit: 10
@@ -22,9 +22,21 @@ updates:
         patterns:
           - "github.com/aws/aws-sdk-go-v2"
           - "github.com/aws/aws-sdk-go-v2/*"
+    cooldown:
+      default-days: 5
+      include:
+        - "*"
+      exclude:
+        - "github.com/mackerelio/*"
+        - "github.com/aws/aws-sdk-go-v2"
+        - "github.com/aws/aws-sdk-go-v2/*"
   - package-ecosystem: github-actions
     directory: "/"
     schedule:
-      interval: weekly
+      interval: daily
       time: "01:00"
       timezone: Asia/Tokyo
+    cooldown:
+      default-days: 5
+      include:
+        - "*"

.github/workflows/create-release-pr.yml

@@ -15,9 +15,9 @@ jobs:
   create:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
-      - uses: shogo82148/actions-setup-perl@v1
+      - uses: shogo82148/actions-setup-perl@5796a908661aa68fc0a5b8f55c6791af2376d72e # v1.35.0
         with:
           perl-version: "5.34"
 

.github/workflows/test.yml

@@ -12,22 +12,22 @@ env:
   DEBIAN_FRONTEND: noninteractive
 jobs:
   lint:
-    uses: mackerelio/workflows/.github/workflows/go-lint.yml@v1.5.0
+    uses: mackerelio/workflows/.github/workflows/go-lint.yml@c7e130d3908894f18068ca4a877e80539b535881 # v1.5.0
     with:
       os-versions: '["ubuntu-latest", "windows-2025"]'
   test:
-    uses: mackerelio/workflows/.github/workflows/go-test.yml@v1.5.0
+    uses: mackerelio/workflows/.github/workflows/go-test.yml@c7e130d3908894f18068ca4a877e80539b535881 # v1.5.0
     with:
       os-versions: '["ubuntu-latest", "windows-2025"]'
   integration-test-linux:
-    uses: mackerelio/workflows/.github/workflows/setup-go-matrix.yml@v1.5.0
+    uses: mackerelio/workflows/.github/workflows/setup-go-matrix.yml@c7e130d3908894f18068ca4a877e80539b535881 # v1.5.0
     with:
       os-versions: '["ubuntu-latest"]'
       run: |
         make testconvention
         ./test.bash
   integration-test-windows:
-    uses: mackerelio/workflows/.github/workflows/setup-go-matrix.yml@v1.5.0
+    uses: mackerelio/workflows/.github/workflows/setup-go-matrix.yml@c7e130d3908894f18068ca4a877e80539b535881 # v1.5.0
     with:
       os-versions: '["windows-2025"]'
       run: |
@@ -42,14 +42,14 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y rpm devscripts debhelper fakeroot crossbuild-essential-arm64 build-essential
           mkdir -p ~/rpmbuild/{BUILD,BUILDROOT,RPMS,SOURCES,SPECS,SRPMS}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version: 1.24.x
       - run: make clean rpm deb tar
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: linux-build-artifacts
           path: |
@@ -62,7 +62,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/v')
     steps:
-      - uses: actions/download-artifact@v5
+      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
           name: linux-build-artifacts
           path: artifacts/
@@ -79,7 +79,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           tag-prefix: "refs/tags/v"
           bump-up-branch-prefix: "bump-version-"
-      - uses: 8398a7/action-slack@v3
+      - uses: 8398a7/action-slack@77eaa4f1c608a7d68b38af4e3f739dcd8cba273e # v3.19.0
         with:
           status: ${{ job.status }}
           fields: repo,message,commit,action,eventName,ref,workflow,job,took