From ec2ab55ee82d1a74b3489e16431aa309b0da6549 Mon Sep 17 00:00:00 2001
From: Michael Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Tue, 25 Nov 2025 17:41:31 +0100
Subject: [PATCH 1/2] Let dependabot only check for the composer file in webapp

---
 .github/dependabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 32df7327c0..cd4c091de7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -17,7 +17,7 @@ updates:
     allow:
         - dependency-type: "all"
   - package-ecosystem: "composer"
-    directory: "/"
+    directory: "/webapp"
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 0

From 6924156d1de464aec021efa70691b9e2edec53ca Mon Sep 17 00:00:00 2001
From: MCJ Vasseur <14887731+vmcj@users.noreply.github.com>
Date: Sun, 23 Nov 2025 18:29:53 +0100
Subject: [PATCH 2/2] Check dependencies for released versions

---
 .github/dependabot.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index cd4c091de7..05a3763ef4 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -25,3 +25,12 @@ updates:
     allow:
         - dependency-type: "all"
     target-branch: "8.3"
+  - package-ecosystem: "composer"
+    directory: "/webapp"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 0
+    versioning-strategy: lockfile-only
+    allow:
+        - dependency-type: "all"
+    target-branch: "9.0"