ci: pin dependabot to Sunday 16:00 America/Chicago
What changed, and why it matters
This commit only changes when Dependabot checks for GitHub Actions updates. It pins the schedule to Sunday at 4:00 PM US Central Time. There is no security relevance to this change.
No security action needed. This is a routine CI scheduling change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds three lines to .github/dependabot.yml specifying day: sunday, time: 16:00, and timezone: America/Chicago for the GitHub Actions update schedule. This is a pure CI scheduling configuration change with no code, dependency, or security policy modifications.
Changed components
.github/dependabot.ymlInspect captured patch +3 / −0
### .github/dependabot.yml
@@ -6,6 +6,9 @@ updates:
schedule:
# Check for updates to GitHub Actions every week
interval: "weekly"
+ day: "sunday"
+ time: "16:00"
+ timezone: "America/Chicago"
# Defines a cooldown period for dependency updates,
# allowing updates to be delayed for a configurable number of days.
cooldown:Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.