Hacker News Reader

Dependabot already differentiates between version updates and security updates:

https://docs.github.com/en/code-security/dependabot/dependab...

I have only skimmed the docs and I wouldn't be completely shocked if there's a "wait X weeks/months to notify about non-security updates" but I don't know about it if it's there. If it is there, hey, great! Won't be the first time I really wished that X did Y and found out that yes it already does.

Seems like this was requested in 2021 and is currently in beta testing for select ecosystems only: https://github.com/dependabot/dependabot-core/issues/3651

Reply on news.ycombinator.com