mirror of
https://github.com/PerpetualSoftware/pad.git
synced 2026-10-26 22:37:03 +00:00
xarmian
6ffd2d1b8c
Every ecosystem now waits 7 days after a release before Dependabot proposes it, so a hijacked or broken version that is yanked within days never reaches a PR. gomod and npm wait 14 days for a semver major. github-actions and docker take default-days only: GitHub honours the semver-*-days keys just for SemVer package managers. Security updates are not affected; cooldown applies to version updates only.