diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0431e45a..fbb9fddf 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,6 +5,8 @@ updates:
     versioning-strategy: widen
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 5
     groups:
       dependencies:
         dependency-type: "production"
@@ -14,6 +16,8 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
+    cooldown:
+      default-days: 5
     groups:
       github-actions:
         patterns:
diff --git a/.github/workflows/changesets.yml b/.github/workflows/changesets.yml
index a48d4404..493cc51d 100644
--- a/.github/workflows/changesets.yml
+++ b/.github/workflows/changesets.yml
@@ -22,7 +22,7 @@ jobs:
           node-version: 22
 
       - name: Install dependencies
-        run: npm install
+        run: npm install --ignore-scripts
 
       - name: Build monorepo
         run: npm run build --if-present
diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
index 326bfd44..48c37b0b 100644
--- a/.github/workflows/node.js.yml
+++ b/.github/workflows/node.js.yml
@@ -27,7 +27,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
       - name: Install dependencies
-        run: npm install
+        run: npm install --ignore-scripts
       - name: Build typescript sources
         run: npm run build
       - name: Run tests
diff --git a/.npmrc b/.npmrc
index 43c97e71..61cbf3fc 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,3 @@
 package-lock=false
+save-exact=true
+ignore-scripts=true