From 348bf96e8e7d0a1ba632e8082de2a9649300de45 Mon Sep 17 00:00:00 2001
From: Jinhao Xu <x@qntx.fun>
Date: Wed, 2 Sep 2026 12:09:29 +0800
Subject: [PATCH] fix(ci): run Dependabot sweep daily

15-minute and 6-hour crons burn Actions minutes. Sweep at 04:00 UTC.
---
 .github/workflows/dependabot.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
index 22c0f6a..aecfba4 100644
--- a/.github/workflows/dependabot.yml
+++ b/.github/workflows/dependabot.yml
@@ -1,12 +1,12 @@
 # Caller owns on:. Pin at @v2.
 # schedule / workflow_dispatch squash-merge green Dependabot PRs.
-# Public cron is */15 * * * *. Private callers use 0 */6 * * *.
+# Daily cron 0 4 * * * (04:00 UTC).
 # Do not checkout the PR. Does not approve.
 name: Dependabot
 
 on:
   schedule:
-    - cron: '*/15 * * * *'
+    - cron: '0 4 * * *'
   workflow_dispatch:
 
 permissions: