Quoting GitHub Changeling
Mirrored from Simon Willison for archival readability. Support the source by reading on the original site.
Dependabot now waits until a new release has been available on its registry for at least three days before opening a version update pull request. This cooldown is now the default and requires no configuration.
— GitHub Changeling, embracing dependency cooldowns
Tags: dependency-cooldowns, packaging, security, github
Discussion (0)
Sign in to join the discussion. Free account, 30 seconds — email code or GitHub.
Sign in →No comments yet. Sign in and be the first to say something.