diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d9fd02a..d417f3e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,8 +6,10 @@ updates:
       interval: weekly
     # Never install a release younger than a week: gives the ecosystem time
     # to detect and yank compromised versions before we ever resolve them.
+    # Patch releases carry most security fixes, so they wait only three days.
     cooldown:
       default-days: 7
+      semver-patch-days: 3
     # One combined PR per week instead of one per package.
     groups:
       minor-and-patch: