From 94550bbc40b1cf48f9110df245e2a6887e5b6a97 Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Fri, 27 Mar 2026 12:04:02 +0000
Subject: [PATCH 1/2] workflow to update dev container

---
 .../update_dev_container_version.yml          | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 .github/workflows/update_dev_container_version.yml

diff --git a/.github/workflows/update_dev_container_version.yml b/.github/workflows/update_dev_container_version.yml
new file mode 100644
index 00000000..6ccd8801
--- /dev/null
+++ b/.github/workflows/update_dev_container_version.yml
@@ -0,0 +1,19 @@
+name: Update Devcontainer Version
+
+on:
+    workflow_dispatch:
+    schedule:
+        - cron: "0 18 * * 4"
+
+jobs:
+    update_devcontainer_version:
+        uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@23342d86a245c076937abd6aecdd0ce06446b1e6
+        permissions:
+            contents: read
+            packages: read
+            pull-requests: write
+        with:
+            base_branch: main
+        secrets:
+            CREATE_PULL_REQUEST_APP_ID: ${{ secrets.CREATE_PULL_REQUEST_APP_ID }}
+            CREATE_PULL_REQUEST_PEM: ${{ secrets.CREATE_PULL_REQUEST_PEM }}

From 75d2d627a601eba11cb410c6b846440e390b307e Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Fri, 27 Mar 2026 12:05:07 +0000
Subject: [PATCH 2/2] add dependabot cooldown

---
 .github/dependabot.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 34429b77..697fee92 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -12,8 +12,11 @@ updates:
       interval: "weekly"
       day: "thursday"
       time: "18:00" #UTC
+    open-pull-requests-limit: 20
     commit-message:
       prefix: "Upgrade: [dependabot] - "
+    cooldown:
+      default-days: 3
 
   ###################################
   # Poetry  #########################
@@ -25,8 +28,11 @@ updates:
       day: "thursday"
       time: "20:00" #UTC
     versioning-strategy: increase
+    open-pull-requests-limit: 20
     commit-message:
       prefix: "Upgrade: [dependabot] - "
+    cooldown:
+      default-days: 3
 
   ###################################
   # NPM workspace  ##################
@@ -41,3 +47,5 @@ updates:
     open-pull-requests-limit: 20
     commit-message:
       prefix: "Upgrade: [dependabot] - "
+    cooldown:
+      default-days: 3