Dependabot supports configuration of a minimum package age before creating a PR [GA] #1105
Labels
ga
Feature phase: Generally available
GHES 3.18
GHES 3.18
GitHub Advanced Security (GHAS)
Product SKU: GitHub Advanced Security
Value Prop
This feature allows Dependabot users to optionally configure a delay for opening a Dependabot PR for a newly updated dependency until a certain amount of time has passed.
Expected Outcome
The cooldown feature helps teams improve security and reduce noise from frequent dependency updates by delaying Dependabot PRs for a configurable period, allowing time for patch releases and stabilizing updates without disrupting project workflows.
The text was updated successfully, but these errors were encountered: