#3-day


GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

Jul 27, 2026 // 13:24

GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening […]