Dependabot for a different branch (not the default branch)

[rsaxena-rajat]

Select Topic Area

Question

Body

Is there a way to configure dependabot to monitor and generate security-alerts and PR fixes for branches other than the default branch? I have two different branches in a repository which I would want dependabot to monitor and provide fixes for.

#Dependabot

[54J4N]

Yes @rsaxena-rajat , configure dependabot for other branches by specifying target-branch in your .github/dependabot.yml file for each branch you want monitored.

updates:
   package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "daily"
        target-branch: "here b name"

you can duplicate the - package-ecosystem: block for each branch you wish to monitor.

[CodeByChathura]

I think it works only for version updates. Not security updates.

[Le0Developer]

Yeah this only works for version updates; just ran into this.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[atulcompro]

Select Topic Area

Question

Body

Is there a way to configure dependabot to monitor and generate security-alerts and PR fixes for branches other than the default branch? I have two different branches in a repository which I would want dependabot to monitor and provide fixes for.

#Dependabot

the solution mentioned works for security updates or version updates ? if not how to manage dependabot security updates for multiple branches ?