Avin Zarlez on Mythryl: “Dependabot updates now wait three days before making pull requests…”

Dependabot updates now wait three days before making pull requests. This is a good fix that balances quickly getting patches out there, but also making sure if an update breaks something or was compromised has some time to pull it back before wide adoption. github.blog/changelog/20...

github.blogDependabot version updates introduce default package cooldown - GitHub ChangelogDependabot now waits until a new release has been available on its registry for at least three days before opening a version update pull request. This cooldown is now the…

19/7/26, 12:48 am0 reposts0 likes

Post