From 12d07b1ff5775ec9c37de6c37f2fca33b9dd6ecf Mon Sep 17 00:00:00 2001
From: Salah-Eddine Saakoun <salah-eddine.saakoun@consensys.net>
Date: Mon, 14 Sep 2026 14:50:56 +0200
Subject: [PATCH] chore: align Dependabot npm cooldown with the Yarn minimal
 age gate

---
 .github/dependabot.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f6e3a1dc2fd..f898111a95a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,8 +7,16 @@ updates:
     directory: '/'
     schedule:
       interval: 'daily'
+    # Mirrors `npmMinimalAgeGate` in `.yarnrc.yml`, which refuses to install any
+    # package published less than 3 days ago. Proposing a fresher version than
+    # that would only produce a pull request that cannot install. The exclusions
+    # match `npmPreapprovedPackages`, which are exempt from the gate.
     cooldown:
       default-days: 3
+      exclude:
+        - '@metamask/*'
+        - '@metamask-previews/*'
+        - '@lavamoat/*'
     allow:
       - dependency-name: '@metamask/*'
     versioning-strategy: 'increase'