Dependabot now implements a default three-day cooldown period before issuing version update pull requests. This delay gives maintainers and security researchers crucial time to address vulnerabilities in new releases before automated tools propagate them. Developers benefit from added supply chain safety, reducing the risk of pulling compromised or unstable package versions into their codebases.
Opening Kapyn…