STORY · VERKTOY_
GitHub introduces standard waiting period before automatic dependency updates
GitHub has made it standard for Dependabot to wait at least three days after a new version is released before opening a pull request for an update. Previously, this "cooldown" period had to be configured manually.
WHY IT MATTERS
This reduces the risk of merging bug fixes or security vulnerabilities before they have been thoroughly tested in production, and makes secure dependency management easier for everyone.
SOURCES
MACHINE-GENERATED SUMMARY This summary is written by machine from the sources below. We sort and explain — but we are a way into the field, not the final word. Check the source when something matters to you.