GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption
- Posted on July 27, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption
GitHub gives Dependabot version updates a three-day cooldown to curb short-lived poisoned packages, while security fixes still ship immediately.
