@oswaldquek using the config file will only work if you've also installed Dependabot Preview from the marketplace: https://github.com/marketplace/dependabot-preview If you're only using automated security fixes without the config file you should only see pull requests created for each alert. Have you checked if there was an attemted pull request created for any of the alerts? You should see this if you click into one. If not you could try triggering a manual update or checking the error from a failed update.
... View more