From 6df37e0701ab4a4884aa1de15b2cd0561348b3a9 Mon Sep 17 00:00:00 2001
From: Nick Cross <ncross@redhat.com>
Date: Wed, 26 Aug 2026 11:49:06 +0100
Subject: [PATCH] Add dependabot.yml and release.yml from shared-actions

---
 .github/dependabot.yml | 18 ++++++++++++++----
 .github/release.yml    | 15 +++++++++++++++
 2 files changed, 29 insertions(+), 4 deletions(-)
 create mode 100644 .github/release.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 31de232..bdc79c1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,12 +8,22 @@ updates:
     directory: "/" # Location of package manifests
     schedule:
       interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major", "version-update:semver-minor"]
-
+    # wait after a new release till we create a PR, to reduce risk of pulling
+    # a compromised new version
+    cooldown:
+      default-days: 7
+      # Exclude our own repos from cooldown
+      # https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-
+      exclude:
+        - "org.jboss.da:*"
+        - "org.jboss.pnc*:*"        # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
+        - "org.commonjava*:*"       # match org.commonjava:xyz and org.commonjava.group:xyz
   - package-ecosystem: "github-actions" # Also update Github actions
     directory: "/"
     schedule:
       # Check for updates to GitHub Actions every week
       interval: "weekly"
+    # wait after a new release till we create a PR, to reduce risk of pulling
+    # a compromised new version
+    cooldown:
+      default-days: 7
diff --git a/.github/release.yml b/.github/release.yml
new file mode 100644
index 0000000..79c66cc
--- /dev/null
+++ b/.github/release.yml
@@ -0,0 +1,15 @@
+# From https://docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes#creating-automatically-generated-release-notes-for-a-new-release
+changelog:
+  categories:
+    - title: 🐛 Fixes / 🚀 Enhancements
+      labels:
+        - '*'
+      exclude:
+        labels:
+          - dependencies
+    - title: 👒 Project Dependencies
+      labels:
+        - java
+    - title: 👒 CI Dependencies
+      labels:
+        - github_actions