This message was deleted.

IMO until dependabot gets some fundamental changes to how it works with Gradle, it'll be unsuitable for most general Gradle projects https://github.com/dependabot/dependabot-core/issues/1164

Thanks, interesting to see the issue. Seems to have gone silent for 6 months? Don't suppose you have a view on renovate? https://www.mend.io/free-developer-tools/renovate/

it has the same core issue, in that it attempts to parse the build scripts itself, which means it cannot understand plugins and other build logic. it looks like it does attempt to handle version ranges, but I don't have any experience with how well it does so

I went with Renovate over Dependabot where I work. Works just as well, supports version catalogs and supports custom locations for dependency files. As mentioned though, won’t help you with that problem