Jul 282026 GitHub Adds 3Day Dependabot Cooldown to Limit Poisoned Package Adoption GitHub gives Dependabot version updates a three-day cooldown to curb short-lived poisoned packages, while security fixes still ship immediately.
