Miau Labs / Insight
Dependabot version updates introduce default package cooldown
Dependabot has introduced a default package cooldown of three days before opening pull requests for version updates.
Dependabot has introduced a default package cooldown of three days before opening pull requests for version updates. Builders should verify if the version update is configured to use the default cooldown or a custom window.
Dependabot has introduced a default package cooldown of three days before opening pull requests for version updates.
- Dependabot now waits until a new release has been available on its registry for at least three days before opening a version update pull request.
- This cooldown is now the default and requires no configuration.
- A short delay gives that signal time to surface, so you are less likely to merge a bad release the moment it ships.
Miau Labs takeBuilders should verify if the version update is configured to use the default cooldown or a custom window.