GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-27 08:01 UTC
  • Importiert: 2026-07-31 17:16 UTC
  • Quelle-ID: thn_global
  • uid_hash: 39a3bb72f0f365f7c359992574a5917963cf7e560c3e2af21334dcee9f6d923b

Inhalt

GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening a pull request.

"The cooldown configuration option in the dependabot.yml still controls the behavior, though, so you can choose a different cooldown parameter that fits your project," the Microsoft-owned subsidiary said.

According to GitHub, the

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews