Hm, dependabot is useless 😄 Why not using the renovate GH app from mend? Super easy, no config and it just works.