Dependabot creates PRs on forks

[lewis-yeung]

Since dependabot.yml was introduced, Dependabot is creating PRs on forks, which is so annoying. Related: dependabot/dependabot-core#2804. Unfortunately, this remains unresolved to this day. If we add a restriction target-branch: "main" for each package in dependabot.yml, and change the default branch name of a fork to something other than main, will it stop Dependabot from creating any PRs?

[JanDeDobbeleer]

@lewis-yeung yes, that should work. You could also adjust that in the fork's main tbh. The work is identical imho.

[lewis-yeung]

Seems to work. It says Dependabot couldn't find the branch main now. 😄

[lewis-yeung]

@JanDeDobbeleer And should also we add target-branch: "main" in this repo? If so, the default branch of a fork can still be easily synced with upstream.

[JanDeDobbeleer]

Sure, no harm in that