Back to feed
GitHub Changelog
GitHub Changelog
7/14/2026
Dependabot version updates introduce default package cooldown

Dependabot version updates introduce default package cooldown

Short summary

GitHub's Dependabot now enforces a default three-day cooldown before opening version update pull requests for new package releases. This prevents automated PRs from immediately targeting freshly published packages that may contain bugs or breaking changes. The cooldown is now enabled by default for all Dependabot version updates.

  • •Dependabot adds default 3-day cooldown for new package releases
  • •Prevents automated PRs for potentially unstable fresh releases
  • •Cooldown is now enabled by default

Generated with AI, which can make mistakes.

#ai-tools#open-source
Read full article at GitHub Changelog

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more

Dependabot learns to wait: version-update PRs now sit for three days by default
Dev.to
The original title is "Dependabot's Three-Day Cooldown Needs an Explicit Exception Policy"
Dev.to
Dependabot can finally pull from private GitHub Packages without a PAT
Dev.to
The original title is "Overcome Dependabot Alert Fatigue: Dev Strategies"
Dev.to