安全★★★Simon Willison · 2026-07-14
GitHub Update: Dependabot Introduces Default Dependency Cooldown Period
GitHub recently updated its Dependabot service to wait three days by default after a new version is released before initiating an update pull request, enhancing security.
📌 Key points
- Dependabot now defaults to waiting three days after a new version release before
- This cooldown period is configured by default and requires no additional setup
- Aims to improve the security of package updates
本页为 gitzw.com 基于公开来源的 AI 中文解读，非原文转载。