| |
Dependabot now implements a three-day default cooldown before opening version update pull requests, allowing time for the community to identify compromised or broken releases before they're merged. Security updates remain unaffected and deploy immediately, while users can customize or disable the cooldown through their configuration file. This safety feature is rolling out across all supported ecosystems on GitHub and will be included in GitHub Enterprise Server 3.23.
Read Full Article →
← More Tech news