Dependabot adds 3-day cooldown to slow version updates

GitHub's Dependabot now waits three days before issuing version update pull requests. The delay gives maintainers and security researchers time to address findings in a release before it reaches user code. The change aims to reduce risks from rushed dependency updates.