Dependabot now defaults to a 3-day cooldown for non-security version updates to reduce supply chain attack risk. Securit...

Dependabot now defaults to a 3-day cooldown for non-security version updates to reduce supply chain attack risk. Security patches still ship immediately.#AI #AutomationSource: GitHub Bloghttps://github.blog/security/supply-chain-security/the-case-for-a-cooldown-why-dependabot-now-waits-before-issuing-version-updates/