1 related articles
GitHub Dependabot now defaults to a three-day cooldown for version update PRs to guard against supply chain attacks and improve dependency stability.