diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 37e29a0f..cf0b665f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,6 +7,9 @@ updates:
       - "ok-to-test"
     schedule:
       interval: "weekly"
+    # Align with MintMaker minimumReleaseAge (~3 days) for supply-chain delay
+    cooldown:
+      default-days: 3
     # Enable auto-merge for patch and minor updates
     open-pull-requests-limit: 10
     ignore:
@@ -21,6 +24,9 @@ updates:
       - "ok-to-test"
     schedule:
       interval: "weekly"
+    # Align with MintMaker minimumReleaseAge (~3 days) for supply-chain delay
+    cooldown:
+      default-days: 3
     # Enable auto-merge for patch and minor updates
     open-pull-requests-limit: 10
     # Group related updates together to reduce PR volume
diff --git a/.golangci.yml b/.golangci.yml
index ba43aca4..da89fb60 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -1,6 +1,8 @@
 version: "2"
 run:
   modules-download-mode: readonly
+  timeout: 15m
+  concurrency: 2
 linters:
   default: none
   enable:
diff --git a/Makefile b/Makefile
index 5acc5ec1..20612179 100644
--- a/Makefile
+++ b/Makefile
@@ -67,7 +67,8 @@ getlint:
 	curl -sSfL https://golangci-lint.run/install.sh | sh -s -- -b $(GOPATH)/bin $(GOLANGCI_LINT_VERSION)
 .PHONY: lint
 lint: getlint
-	$(GOPATH)/bin/golangci-lint run --timeout 5m
+	GOTOOLCHAIN=$(GO_VERSION) go mod download
+	$(GOPATH)/bin/golangci-lint run --timeout 15m
 
 ensure-goreleaser:
 	@command -v goreleaser >/dev/null 2>&1 || go install github.com/goreleaser/goreleaser/v2@${GORELEASER_VERSION}