use dependabot with cooldown.