Simon Willison’s Weblog

Dependabot now waits until a new release has been available on its registry for at least three days before opening a version update pull request. This cooldown is now the default and requires no configuration.

— GitHub Changelog, embracing dependency cooldowns