GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening a pull request.”The cooldown configuration option in the dependabot.yml still controls the behavior, though, so you can choose a different cooldown parameter that fits your project,” the Microsoft-owned subsidiary said.According to GitHub, the
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/07/github-adds-3-day-dependabot-cooldown.html
