Dependabot and/or Github Security not opening PRs/notifications for rails security update

As of this writing it’s been 24+ hours since the rails team release the 6.0.3.2 security fix. My repositories that have Dependabot and the Alerts notifications enabled have not triggered any alert or PR related etc the new version.

Shouldn’t they have done that somewhat automatically and quickly? Not saying it would happen immediately, but within several hours?

Hi there! :wave:

Did the PRs come through, or are you still waiting? We may need to look into your configuration settings?