diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 547df22acd..bd0d346620 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,6 +4,10 @@ updates:
     directory: "/"
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 7
+      exclude:
+        - "@actions/*"
     labels:
       - Rebuild
     # Ignore incompatible dependency updates
@@ -25,6 +29,10 @@ updates:
       - "/.github/actions"
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 7
+      exclude:
+        - "actions/*"
     labels:
       - Rebuild
     groups:
diff --git a/lib/start-proxy-action.js b/lib/start-proxy-action.js
index 56df2e380c..e0aca4c39a 100644
--- a/lib/start-proxy-action.js
+++ b/lib/start-proxy-action.js
@@ -103548,7 +103548,7 @@ function getCredentials(logger, registrySecrets, registriesCredentials, language
         "Invalid credentials - fields must contain only printable characters"
       );
     }
-    if (!isDefined(e.username) && (isDefined(e.password) && isPAT(e.password) || isDefined(e.token) && isPAT(e.token))) {
+    if (!isDefined2(e.username) && (isDefined2(e.password) && isPAT(e.password) || isDefined2(e.token) && isPAT(e.token))) {
       logger.warning(
         `A ${e.type} private registry is configured for ${e.host || e.url} using a GitHub Personal Access Token (PAT), but no username was provided. This may not work correctly. When configuring a private registry using a PAT, select "Username and password" and enter the username of the user who generated the PAT.`
       );