Quoting GitHub Changelog

GitHub has updated its Dependabot service to include a mandatory waiting period for software dependency updates. As of July 14, 2026, the system now waits at least three days after a new release appears on its registry before it automatically generates a version update pull request.

This change is now the default setting for all users and does not require any manual configuration. By implementing this cooldown period, GitHub aims to provide a buffer between the release of a new software version and the automated suggestion to update to it.

This update is significant for developers who rely on Dependabot to keep their projects current. The delay helps ensure that new releases have time to stabilize and that any immediate issues or bugs discovered shortly after a launch can be addressed before the update is pushed to active codebases.