From f79c21041c1e257e3309f6356a023f1a585652ee Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Wed, 25 Mar 2026 10:06:25 +0000
Subject: [PATCH 1/2] add workflow to update dev container

---
 .../update_dev_container_version.yml          | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 .github/workflows/update_dev_container_version.yml

diff --git a/.github/workflows/update_dev_container_version.yml b/.github/workflows/update_dev_container_version.yml
new file mode 100644
index 00000000..5a07bb16
--- /dev/null
+++ b/.github/workflows/update_dev_container_version.yml
@@ -0,0 +1,19 @@
+name: Update Devcontainer Version
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 18 * * 4"
+
+jobs:
+  update_devcontainer_version:
+    uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@d2a4595b1bfa59f04c7cecb080a126321d42a333
+    permissions:
+      contents: read
+      packages: read
+      pull-requests: write
+    with:
+      base_branch: main
+    secrets:
+      AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
+      AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}

From b2df8f110f910be6c6fbde110ba03e3f85e1ce9d Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Wed, 25 Mar 2026 10:07:42 +0000
Subject: [PATCH 2/2] use dependabot cooldown

---
 .github/dependabot.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 86f3eaf9..9934ed07 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -23,6 +23,8 @@ updates:
     open-pull-requests-limit: 20  
     commit-message:
       prefix: "Upgrade: [dependabot] - "
+    cooldown:
+      default-days: 3
   - package-ecosystem: "github-actions"
     # Workflow files stored in the
     # default location of `.github/workflows`
@@ -34,7 +36,8 @@ updates:
     open-pull-requests-limit: 20  
     commit-message:
       prefix: "Upgrade: [dependabot] - "
-
+    cooldown:
+      default-days: 3
   ###################################
   # NPM workspace  ##################
   ###################################
@@ -50,7 +53,8 @@ updates:
       prefix: "Upgrade: [dependabot] - "
     registries:
       - npm-github
-
+    cooldown:
+      default-days: 3
   ###################################
   # Java workspace  ##################
   ###################################
@@ -64,3 +68,6 @@ updates:
     open-pull-requests-limit: 20
     commit-message:
       prefix: "Upgrade: [dependabot] - "
+    cooldown:
+      default-days: 3
+