https://www.infoq.com InfoQ Dependency Management feed https://www.infoq.com/news/2026/07/github-dependabot-cooldown/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=Dependency+Management <img src="https://www.infoq.com/styles/static/images/logo/logo_bigger.jpg"/><p>Instead of immediately opening pull requests when newer dependency versions are released, Dependabot now waits three days before suggesting upgrades, thus increasing the likelihood that malicious releases are identified and removed before they can be integrated.</p> <i>By Sergio De Simone</i> Software Supply Chain github Security Vulnerabilities Dependency Management Development DevOps news Tue, 28 Jul 2026 19:00:00 GMT https://www.infoq.com/news/2026/07/github-dependabot-cooldown/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=Dependency+Management Sergio De Simone 2026-07-28T19:00:00Z /news/2026/07/github-dependabot-cooldown/en https://www.infoq.com/news/2026/07/gitlab-19-2-ai-agents/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=Dependency+Management <img src="https://res.infoq.com/news/2026/07/gitlab-19-2-ai-agents/en/headerimage/generatedHeaderImage-1784567507763.jpg"/><p>GitLab has released version 19.2 of its DevSecOps platform, adding agentic automation aimed at the security and review work that has piled up as AI coding tools generate more code than developers can check by hand. The release, announced on 16 July 2026, brings four features out of beta or into public beta: Dependency Scanning Auto-Remediation, Security Review Flow, GitLab Duo CLI and Custom Flows</p> <i>By Matt Saunders</i> Application Security GitLab Continuous Integration Dependency Management DevOps news Tue, 21 Jul 2026 08:00:00 GMT https://www.infoq.com/news/2026/07/gitlab-19-2-ai-agents/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=Dependency+Management Matt Saunders 2026-07-21T08:00:00Z /news/2026/07/gitlab-19-2-ai-agents/en