build(deps): only install packages after 7d seasoning

but explicitly allow packages we have a maintenance relationship with
as we adopt versions of those as quickly as possible historically

Author: mikehardy

.github/dependabot.yml

@@ -9,6 +9,11 @@ updates:
     # Check the npm registry for updates every day (weekdays)
     schedule:
       interval: 'daily'
+    cooldown:
+      default-days: 7
+      semver-major-days: 7
+      semver-minor-days: 7
+      semver-patch-days: 7
     target-branch: dependency-updates
     labels:
       - 'dependencies'

.github/scripts/compare-types/.yarnrc.yml

@@ -1 +1,7 @@
 yarnPath: ../../../.yarn/releases/yarn-4.14.1.cjs
+
+npmMinimalAgeGate: 7d
+
+# In case you must have a package version that would be disallowed
+# by the above npmMinimalAgeGate
+#npmPreapprovedPackages:

.github/workflows/scripts/functions/.yarnrc.yml

@@ -1 +1,7 @@
 yarnPath: ../../../../.yarn/releases/yarn-4.14.1.cjs
+
+npmMinimalAgeGate: 7d
+
+# In case you must have a package version that would be disallowed
+# by the above npmMinimalAgeGate
+#npmPreapprovedPackages:

.yarnrc.yml

@@ -9,6 +9,14 @@ nodeLinker: node-modules
 plugins:
   - checksum: 67ce9e30cf152af35d3dc292f915cb39220942f5f406211801da2b721d873857f8ea6d9c57893e1295133f5d128fa6388bf16a4610ef788f30e987e58f84db26
     path: .yarn/plugins/@yarnpkg/plugin-postinstall-dev.cjs
-    spec: "https://raw.githubusercontent.com/sachinraja/yarn-plugin-postinstall-dev/main/bundles/%40yarnpkg/plugin-postinstall-dev.js"
+    spec: 'https://raw.githubusercontent.com/sachinraja/yarn-plugin-postinstall-dev/main/bundles/%40yarnpkg/plugin-postinstall-dev.js'
 
 yarnPath: .yarn/releases/yarn-4.14.1.cjs
+
+npmMinimalAgeGate: 7d
+
+# In case you must have a package version that would be disallowed
+# by the above npmMinimalAgeGate
+npmPreapprovedPackages:
+  - 'firebase@12.12.1' # If adopting recent firebase-js-sdk, specify directly here
+  - '@react-native-firebase/*'