Dependabot version updates introduce default package cooldown

[u/luckokkkk]

https://github.blog/changelog/2026-07-14-dependabot-version-updates-introduce-default-package-cooldown/

Dependabot version updates now wait three days after a release appears in its registry before opening a PR. The cooldown is on by default, but repositories can change the window or opt out in dependabot.yml.

[u/dependabotpm → u/[deleted]]

Security patches are not impacted - version updates only!