Post
GitHub
github.com
did:plc:sydgpvanh46u766n536r33oa
Dependabot now waits three days before non-security version update pull requests, giving scanners time to catch a poisoned release first.
The case for this cooldown delay ⬇️
https://github.blog/security/supply-chain-security/the-case-for-a-cooldown-why-dependabot-now-waits-before-issuing-version-updates/
2026-08-23T16:45:01.866Z