Merge pull request #4578 from github/nickrolfe/seven-day-cooldown

Update Dependabot and npm cooldowns from 3 to 7 days

Author: nickrolfe

.github/dependabot.yml

@@ -3,7 +3,7 @@ updates:
   - package-ecosystem: "npm"
     directory: "extensions/ql-vscode"
     cooldown:
-      default-days: 3
+      default-days: 7
     schedule:
       interval: "weekly"
       day: "thursday" # Thursday is arbitrary
@@ -35,7 +35,7 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     cooldown:
-      default-days: 3
+      default-days: 7
     schedule:
       interval: "weekly"
       day: "thursday" # Thursday is arbitrary
@@ -48,7 +48,7 @@ updates:
   - package-ecosystem: docker
     directory: "extensions/ql-vscode/test/e2e/docker"
     cooldown:
-      default-days: 3
+      default-days: 7
     schedule:
       interval: "weekly"
       day: "thursday" # Thursday is arbitrary

extensions/ql-vscode/.npmrc

@@ -1,4 +1,4 @@
 # Storybook requires this option to be set. See https://github.com/storybookjs/storybook/issues/18298
 legacy-peer-deps=true
-# Supply chain security: require packages to be at least 3 days old before install
-min-release-age=3
+# Supply chain security: require packages to be at least 7 days old before install
+min-release-age=7