GitHub's Dependabot Now Waits 72 Hours Before Updating Your Dependencies

GitHub added a three-day default cooldown on Dependabot version update pull requests, aiming to filter out short-lived poisoned package releases before they land in your repo.

Source

GitHub

Published

Aug 23, 2026, 5:18 PM

Author

AlphaSignal Newsroom

Read

1 min read

GitHub added a three-day default cooldown on Dependabot version update pull requests, aiming to filter out short-lived poisoned package releases before they land in your repo.

Reporting is indexed from AlphaSignal. Rights remain with the original publisher and cited sources.

Read original report