fixes

Author: romainmenke

.github/dependabot.yml

@@ -6,6 +6,8 @@ updates:
     interval: weekly
     time: "01:00"
     timezone: "Europe/Brussels"
+  cooldown:
+    default-days: 7
   open-pull-requests-limit: 10
   versioning-strategy: increase
   rebase-strategy: auto
@@ -15,5 +17,7 @@ updates:
     interval: weekly
     time: "01:00"
     timezone: Europe/Brussels
+  cooldown:
+    default-days: 7
   open-pull-requests-limit: 10
   rebase-strategy: auto

.github/workflows/collect-plugin-data.yml

@@ -10,12 +10,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: check out
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 1
 
       - name: setup node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           node-version: latest
           cache: 'npm'

.github/workflows/update-directory.yml

@@ -9,12 +9,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: check out
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 1
 
       - name: setup node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           node-version: latest
           cache: 'npm'
@@ -47,7 +47,7 @@ jobs:
 
       - name: Open pull request
         if: ${{ env.UPDATED_PLUGIN }}
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const { repo, owner } = context.repo;