From 9ff60aacf33547ecfd742b24e2ee7e7d8ffbd450 Mon Sep 17 00:00:00 2001
From: Alexander Kondratev <kondratev.av@inbox.ru>
Date: Mon, 14 Sep 2026 12:26:30 +0500
Subject: [PATCH 1/2] Add zizmor, update dependabot cooldown

---
 .github/dependabot.yml | 4 ++++
 .github/zizmor.yml     | 7 +++++++
 2 files changed, 11 insertions(+)
 create mode 100644 .github/zizmor.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e168b9a..5ce2213 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -11,6 +11,8 @@ updates:
     groups:
       dev-tooling:
         patterns: ["pytest*", "ruff", "mypy", "django-stubs", "psycopg*"]
+    cooldown:
+      default-days: 7
 
   # Pinned action SHAs go stale quietly and are a supply-chain surface.
   - package-ecosystem: github-actions
@@ -18,3 +20,5 @@ updates:
     schedule:
       interval: weekly
     open-pull-requests-limit: 5
+    cooldown:
+      default-days: 7
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
new file mode 100644
index 0000000..bed072b
--- /dev/null
+++ b/.github/zizmor.yml
@@ -0,0 +1,7 @@
+rules:
+  secrets-outside-env:
+    disable: true
+  unpinned-uses:
+    config:
+      policies:
+        "*": ref-pin

From 5645ee5100bfa3855e6bb3bc3ea201c351f2218b Mon Sep 17 00:00:00 2001
From: Alexander Kondratev <kondratev.av@inbox.ru>
Date: Tue, 15 Sep 2026 10:03:10 +0500
Subject: [PATCH 2/2] Drop zizmor.yml

---
 .github/zizmor.yml | 7 -------
 1 file changed, 7 deletions(-)
 delete mode 100644 .github/zizmor.yml

diff --git a/.github/zizmor.yml b/.github/zizmor.yml
deleted file mode 100644
index bed072b..0000000
--- a/.github/zizmor.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-rules:
-  secrets-outside-env:
-    disable: true
-  unpinned-uses:
-    config:
-      policies:
-        "*": ref-pin