Dependabot version updates introduce default package cooldown

Software Releases & Release Notes(github.blog)view on HackerNews
Dependabotpackage cooldownsupply chain attacksversion updates

Author: woodruffw

Date: 7/14/2026

Article Summary:
Dependabot introduces a default package cooldown for version updates to prevent supply chain attacks.