diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a798c06..65a9fee 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,18 +3,29 @@ updates:
 - package-ecosystem: "cargo"
   directories:
     - "ninja-xtask"
-    - "ninja-build_rs"
+  schedule:
+    interval: "weekly"
+  cooldown:
+    default-days: 10
+- package-ecosystem: "docker"
+  directory: "/"
+  # trust fedora to release images fast to fix CVEs
   schedule:
     interval: "daily"
 - package-ecosystem: "docker"
   directory: "/.devcontainer"
+  # this is our own image
   schedule:
     interval: "daily"
 - package-ecosystem: "devcontainers"
   directory: "/"
   schedule:
-    interval: "daily"
+    interval: "weekly"
+  cooldown:
+    default-days: 10
 - package-ecosystem: "github-actions"
   directory: "/"
   schedule:
-    interval: "daily"
+    interval: "weekly"
+  cooldown:
+    default-days: 10
diff --git a/Dockerfile b/Dockerfile
index 5ccf9d1..9237685 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM fedora:latest@sha256:498c452f32a739b61f0ef215bce9924ebc4866cbe44710f58157d77723b7a6d2
+FROM fedora:latest@sha256:43b29f65a41eb9c35e1cd5323e3bdf3b655c2357a9f4f1ff2f9c2798e5045d80
 
 # ---
 # Setup base system ...
@@ -95,12 +95,10 @@ WORKDIR /opt
     RUN umask 0002 \
     && chmod a+x rustup/rustup-init \
     && rustup/rustup-init -v -y \
-    # beta & nightly add 2Gb each to the image, but I use them a lot ...
-    && rustup toolchain install stable beta nightly \
+    # Don't bother with nightly, as pulling larger base image then updating is slower than just installing via updateContentCommand
+    && rustup toolchain install stable \
     && rustup component add \
             clippy \
-            llvm-tools \
-            llvm-tools-preview \
             rustfmt \
             rust-src \
     && cargo binstall --secure -y \