GitHub Introduces Three-Day Cooldown Phase in Dependabot27. July 2026CybersecurityDependabot will now wait three days by default after a new package release before automatically creating pull requests — the cooldown is configurable in dependabot.yml. Share on: