Cool down period for updating dependencies.

[YooSunYoung]

Attempted at #266

I think it's still a good idea so we should add this policy somehow (or just wait until pixi supports it...)