chore(dependabot): raise semver-patch cooldown to 5 days [skip ci]

[MusaMisto]

chore(dependabot): raise semver-patch cooldown to 5 days

Patch is the only update class that auto-merges with no human
involved, yet carried the shortest cooldown (1 day, a third of
GitHub's 3-day default). Soak time should scale with how little
scrutiny a bump receives, not with how breaking semver claims it is.

Costs nothing in security terms: cooldown never applies to Dependabot
security updates, which still fire immediately.

Propagated from simplify9/.github (dependabot-templates).

[coderabbitai]

📝 Walkthrough

Summary

• Updated .github/dependabot.yml.
• Increased the semver-patch cooldown for NuGet and GitHub Actions from 1 day to 5 days.
• Security updates remain unaffected and continue immediately.
• Other cooldown settings remain unchanged.

Risk: risk:low

Security-sensitive areas: Dependabot update timing changed. Security update behavior did not change.

Test coverage impact: No runtime or test code changed. Configuration review is sufficient.

Operational concerns: Patch updates may arrive up to four days later. Rollback requires reverting the cooldown values in .github/dependabot.yml. No migration or deployment changes are required.

Walkthrough

The Dependabot configuration changes the patch update cooldown from one day to five days for NuGet and GitHub Actions.

Changes

Dependabot cooldown configuration

Layer / File(s)	Summary
Patch cooldown settings .github/dependabot.yml	The semver-patch-days cooldown increases from 1 to 5 for NuGet and GitHub Actions.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested labels: infra, risk:high

Suggested reviewers: samerzughul

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly identifies the Dependabot patch cooldown change and matches the main change.
Description check	✅ Passed	The description explains the five-day patch cooldown and confirms that security updates remain unaffected.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}