Skip Dependabot cooldown for internal wp-cli packages

[swissspidy]

Summary

Updated Dependabot configuration to exclude internal wp-cli packages from the default 7-day cooldown period, allowing them to be updated immediately upon release.

Changes

• Added exclusion rule to Dependabot configuration for the Composer package ecosystem
• Internal packages matching the wp-cli/* pattern are now exempt from the cooldown delay
• This allows trusted internal packages to be updated promptly without waiting for the standard cooldown period

Rationale

Since packages from the wp-cli organization are maintained internally and considered trusted, there's no need to apply the same cautious update delay that applies to external dependencies. This enables faster iteration on internal tooling and dependencies.

https://claude.ai/code/session_01FHYHkFiEDRs9E7BstQpdLD

Summary by CodeRabbit

• Chores
  • Dependabot will no longer create Composer update pull requests for packages matching the wp-cli/* pattern.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[coderabbitai]

Understand this PR’s impact

Explore downstream dependencies and potential security impact with Blast Radius.

View blast radius →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 0d8c6a2e-c8bc-4955-8fe8-2084a607529b

📥 Commits

Reviewing files that changed from the base of the PR and between bd1543c and d13ee79.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The Dependabot Composer configuration now excludes wp-cli/* packages from the configured cooldown.

Changes

Dependabot policy

Layer / File(s)	Summary
Composer package exclusion .github/dependabot.yml	Adds wp-cli/* to the Composer cooldown exclusion list. Dependabot no longer applies the seven-day default cooldown to these packages.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: schlessera

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: excluding internal wp-cli packages from the Dependabot cooldown.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}