From e1043507d763eb37f6da3770fcff410f8c002519 Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Wed, 25 Mar 2026 09:47:17 +0000
Subject: [PATCH 1/4] workflow to update dev container

---
 .../update_dev_container_version.yml          | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 .github/workflows/update_dev_container_version.yml

diff --git a/.github/workflows/update_dev_container_version.yml b/.github/workflows/update_dev_container_version.yml
new file mode 100644
index 0000000000..6c959f96db
--- /dev/null
+++ b/.github/workflows/update_dev_container_version.yml
@@ -0,0 +1,19 @@
+name: Update Devcontainer Version
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 18 * * 4"
+
+jobs:
+  update_devcontainer_version:
+    uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@d2a4595b1bfa59f04c7cecb080a126321d42a333
+    permissions:
+        contents: read
+        packages: read
+        pull-requests: write
+    with:
+      base_branch: main
+    secrets:
+      AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
+      AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}

From 45aa0b179bf126791c0d8ff55f6dc4ad1ad1b2a2 Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Wed, 25 Mar 2026 09:49:38 +0000
Subject: [PATCH 2/4] dependabot cooldown

---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 99db32bfd3..f7460a5628 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -23,6 +23,8 @@ updates:
     open-pull-requests-limit: 20  
     commit-message:
       prefix: "Upgrade: [dependabot] - "
+    cooldown:
+      default-days: 3
   - package-ecosystem: "github-actions"
     # Workflow files stored in the
     # default location of `.github/workflows`
@@ -34,6 +36,8 @@ updates:
     open-pull-requests-limit: 20  
     commit-message:
       prefix: "Upgrade: [dependabot] - "
+    cooldown:
+      default-days: 3
 
   ###################################
   # NPM workspace  ##################
@@ -50,3 +54,5 @@ updates:
       prefix: "Upgrade: [dependabot] - "
     registries:
       - npm-github
+    cooldown:
+      default-days: 3

From cc2b8a5a1490dee647b9c52324a75e20736cec3e Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Wed, 25 Mar 2026 10:02:55 +0000
Subject: [PATCH 3/4] fix indent

---
 .github/workflows/update_dev_container_version.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/update_dev_container_version.yml b/.github/workflows/update_dev_container_version.yml
index 6c959f96db..5a07bb16a5 100644
--- a/.github/workflows/update_dev_container_version.yml
+++ b/.github/workflows/update_dev_container_version.yml
@@ -9,9 +9,9 @@ jobs:
   update_devcontainer_version:
     uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@d2a4595b1bfa59f04c7cecb080a126321d42a333
     permissions:
-        contents: read
-        packages: read
-        pull-requests: write
+      contents: read
+      packages: read
+      pull-requests: write
     with:
       base_branch: main
     secrets:

From 2f179e9ec26876615315c2c15152886ae1d99fd0 Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Fri, 27 Mar 2026 13:55:11 +0000
Subject: [PATCH 4/4] update

---
 .github/workflows/update_dev_container_version.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/update_dev_container_version.yml b/.github/workflows/update_dev_container_version.yml
index 209a3fc81f..b6cdd8f2e0 100644
--- a/.github/workflows/update_dev_container_version.yml
+++ b/.github/workflows/update_dev_container_version.yml
@@ -15,5 +15,5 @@ jobs:
     with:
       base_branch: main
     secrets:
-      AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
-      AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}
+      CREATE_PULL_REQUEST_APP_ID: ${{ secrets.CREATE_PULL_REQUEST_APP_ID }}
+      CREATE_PULL_REQUEST_PEM: ${{ secrets.CREATE_PULL_REQUEST_PEM }}