Dependabot has introduced a new default package cooldown that waits at least three days after a new release is available on its registry before opening a version update pull request. This built-in delay gives developers more time to identify early bugs and prevents the immediate adoption of potentially unstable package versions.