The case for a cooldown: Why Dependabot now waits before issuing version updates

A new default three-day cooldown delays version update pull requests so maintainers and security researchers can address findings in a release before