{ads}

›

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

Written By Monday, 27 July 2026 Add Comment



July 27, 2026 at 01:31PM

GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening a pull request. "The cooldown configuration option in the dependabot.yml still controls the behavior, though, so you can choose a different cooldown parameter that fits your project," the Microsoft-owned subsidiary said. According to GitHub, the

from The Hacker News https://ift.tt/UfgwsxJ

0 Response to "GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads