From 2077c0e6fe986c970d63c78ec94697381f2b0f67 Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Wed, 25 Mar 2026 08:54:37 +0000
Subject: [PATCH 1/4] cooldown dependabot

---
 .github/dependabot.yml                             | 8 ++++++--
 .github/workflows/update_dev_container_version.yml | 2 +-
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4fe13dbe..33a73a36 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -20,7 +20,8 @@ updates:
       time: "18:00" # UTC
     commit-message:
       prefix: "Upgrade: [dependabot] - "
-
+    cooldown:
+      default-days: 3
   ###################################
   # Poetry  #########################
   ###################################
@@ -34,7 +35,8 @@ updates:
     commit-message:
       prefix: "Upgrade: [dependabot] - "
     versioning-strategy: increase
-
+    cooldown:
+      default-days: 3
   ###################################
   # NPM workspace  ##################
   ###################################
@@ -50,3 +52,5 @@ updates:
       prefix: "Upgrade: [dependabot] - "
     registries:
       - npm-github
+    cooldown:
+      default-days: 3
diff --git a/.github/workflows/update_dev_container_version.yml b/.github/workflows/update_dev_container_version.yml
index 1a83c223..6c959f96 100644
--- a/.github/workflows/update_dev_container_version.yml
+++ b/.github/workflows/update_dev_container_version.yml
@@ -3,7 +3,7 @@ name: Update Devcontainer Version
 on:
   workflow_dispatch:
   schedule:
-    - cron: "0 18 * * 1"
+    - cron: "0 18 * * 4"
 
 jobs:
   update_devcontainer_version:

From 6241ff33628c53c3fce98cb4576d367049195b01 Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Wed, 25 Mar 2026 10:05:24 +0000
Subject: [PATCH 2/4] fix indent

---
 .github/workflows/update_dev_container_version.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/update_dev_container_version.yml b/.github/workflows/update_dev_container_version.yml
index 6c959f96..5a07bb16 100644
--- a/.github/workflows/update_dev_container_version.yml
+++ b/.github/workflows/update_dev_container_version.yml
@@ -9,9 +9,9 @@ jobs:
   update_devcontainer_version:
     uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@d2a4595b1bfa59f04c7cecb080a126321d42a333
     permissions:
-        contents: read
-        packages: read
-        pull-requests: write
+      contents: read
+      packages: read
+      pull-requests: write
     with:
       base_branch: main
     secrets:

From 00b995fd41edc0aad66e9a0b418d9bb375a6d6ef Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Wed, 25 Mar 2026 16:03:46 +0000
Subject: [PATCH 3/4] use new app for pull request

---
 .github/workflows/update_dev_container_version.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/update_dev_container_version.yml b/.github/workflows/update_dev_container_version.yml
index 5a07bb16..e5fbe409 100644
--- a/.github/workflows/update_dev_container_version.yml
+++ b/.github/workflows/update_dev_container_version.yml
@@ -15,5 +15,5 @@ jobs:
     with:
       base_branch: main
     secrets:
-      AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
-      AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}
+      AUTOMERGE_APP_ID: ${{ secrets.CREATE_PULL_REQUEST_APP_ID }}
+      AUTOMERGE_PEM: ${{ secrets.CREATE_PULL_REQUEST_PEM }}

From a67b368638f9663bb812032ea86f2f3ffe3bad2b Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Fri, 27 Mar 2026 11:19:39 +0000
Subject: [PATCH 4/4] fix it

---
 .github/dependabot.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 33a73a36..69c719ed 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -18,6 +18,7 @@ updates:
       interval: "weekly"
       day: "friday"
       time: "18:00" # UTC
+    open-pull-requests-limit: 20
     commit-message:
       prefix: "Upgrade: [dependabot] - "
     cooldown: