[leinardi]

Summary

Dependabot now waits 7 days after a release before proposing it, for every ecosystem (cooldown.default-days: 7). GitHub's default cooldown is 3 days; the longer wait gives a broken or compromised release time to be yanked before it reaches a pull request. Security updates are not affected. Only the cooldown blocks are added; schedules, groups, limits, ignores and commit prefixes stay as they are.

The pre-commit hooks passed on the changed file; the full make target was not run, CI covers it.

---

Pull request checklist

• I am targeting the master branch
• I have rebased this branch on top of the destination branch
• I have executed make check locally before creating the commit and it has run successfully
• I have run make ansible-syntax-check locally and it has passed
• Every commit message follows
  Conventional Commits with a scope
  (type(scope): subject), and its type matches whether the change ships (feat/fix only for
  what changes the playbook)
• I have performed a self-review of my own code
• There are no WIP commits in this PR
• I ran the validation commands for every area touched (see the AGENTS.md validation matrix)

---

Type of changes

• 🐛 Bug fix
• ✨ New feature
• 🔧 Refactoring
• 📜 Docs
• 🧰 CI / tooling / infra
• Other (describe in Summary)