{
  "id": 17455,
  "title": "GitHub Introduces Default \"Cooldown\" Policy for Dependabot Version Updates",
  "url": "https://urgent.news/2026/07/28/github-introduces-default-cooldown-policy-for-dependabot-version",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-07-28T19:00:00.000Z",
  "source": {
    "name": "InfoQ",
    "slug": "infoq",
    "url": "https://www.infoq.com/news/2026/07/github-dependabot-cooldown/"
  },
  "original_language": "en",
  "account": null,
  "summary": "Instead of immediately opening pull requests when newer dependency versions are released, Dependabot now waits three days before suggesting upgrades, thus increasing the likelihood that malicious releases are identified and removed before they can be integrated. By Sergio De Simone",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}