GitHub 开发者博客:The case for a cooldown: Why Dependabot now waits before issuing version updates
原文摘要:A new default three-day cooldown delays version update pull requests so 维护者 and security researchers can address findings in a release before it gets into your code. The po 来源:GitHub 开发者博客。建议继续查看原文,重点核对它影响的工具入口、成本、风险和真实使用场景。