Use Case

As a... Node Driver developer
I want... dependabot updates to have a 7 day cooldown
So that... a newly published malicious or unstable package will not be picked up for 7 days, allowing for maintainers to review and fix a malicious or unstable package

User Experience

• for all repos: dependabot updates come in a week later than usual
• this must be done for all of our repos: driver, bson, conn string, etc.

Dependencies

• none

Risks/Unknowns

• an important update may be delayed by a week

Acceptance Criteria

Implementation Requirements

• Add a Dependabot `cooldown` block with numeric `default-days: 7` to the relevant entries

Testing Requirements

• none

Documentation Requirements

• none

Follow Up Requirements

• none