Security News GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption TheHackerNews Daniel Bender 27 Jul 2026 Share GitHub gives Dependabot version updates a three-day cooldown to curb short-lived poisoned packages, while security fixes still ship immediately.
