From 9270b71955c6429ee1b38d7afc2e80e975b1c104 Mon Sep 17 00:00:00 2001
From: kingchenc <kingchencp@gmail.com>
Date: Sun, 26 Jul 2026 13:37:44 +0200
Subject: [PATCH] chore(dependabot): move update schedule from weekly to
 monthly
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

With ~27 wickra-lib repos each running weekly across several ecosystems, the
aggregate PR volume lands almost every weekday. Switch every ecosystem to a
monthly cadence and pin the run time (06:00 Etc/UTC) so version-update PRs
arrive as one predictable low-frequency batch. Security updates are unaffected
— they still open off-schedule when an advisory matches.
---
 .github/dependabot.yml | 28 +++++++++++++++++++++-------
 1 file changed, 21 insertions(+), 7 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index dd0f954..1ed0be2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,7 +4,9 @@ updates:
   - package-ecosystem: cargo
     directory: "/"
     schedule:
-      interval: weekly
+      interval: monthly
+      time: "06:00"
+      timezone: "Etc/UTC"
     open-pull-requests-limit: 10
     cooldown:
       default-days: 7
@@ -37,7 +39,9 @@ updates:
   - package-ecosystem: npm
     directory: "/bindings/node"
     schedule:
-      interval: weekly
+      interval: monthly
+      time: "06:00"
+      timezone: "Etc/UTC"
     open-pull-requests-limit: 10
     cooldown:
       default-days: 7
@@ -51,7 +55,9 @@ updates:
   - package-ecosystem: pip
     directory: "/bindings/python"
     schedule:
-      interval: weekly
+      interval: monthly
+      time: "06:00"
+      timezone: "Etc/UTC"
     open-pull-requests-limit: 10
     cooldown:
       default-days: 7
@@ -66,7 +72,9 @@ updates:
   - package-ecosystem: github-actions
     directory: "/"
     schedule:
-      interval: weekly
+      interval: monthly
+      time: "06:00"
+      timezone: "Etc/UTC"
     open-pull-requests-limit: 10
     cooldown:
       default-days: 7
@@ -86,7 +94,9 @@ updates:
   - package-ecosystem: maven
     directory: "/bindings/java"
     schedule:
-      interval: weekly
+      interval: monthly
+      time: "06:00"
+      timezone: "Etc/UTC"
     open-pull-requests-limit: 10
     cooldown:
       default-days: 7
@@ -102,7 +112,9 @@ updates:
   - package-ecosystem: nuget
     directory: "/bindings/csharp/Wickra.Backtest.Tests"
     schedule:
-      interval: weekly
+      interval: monthly
+      time: "06:00"
+      timezone: "Etc/UTC"
     open-pull-requests-limit: 10
     cooldown:
       default-days: 7
@@ -117,7 +129,9 @@ updates:
   - package-ecosystem: gomod
     directory: "/bindings/go"
     schedule:
-      interval: weekly
+      interval: monthly
+      time: "06:00"
+      timezone: "Etc/UTC"
     open-pull-requests-limit: 10
     cooldown:
       default-days: 7