Summary
.github/dependabot.yml uses package-ecosystem: "*", which is not a valid Dependabot ecosystem value.
Impact
Dependabot cannot reliably identify the repository package managers, so version-update coverage may not run as intended.
Proposed fix
Declare explicit Maven, pip, and GitHub Actions update configurations for the repository manifests and workflows.
Summary
.github/dependabot.ymlusespackage-ecosystem: "*", which is not a valid Dependabot ecosystem value.Impact
Dependabot cannot reliably identify the repository package managers, so version-update coverage may not run as intended.
Proposed fix
Declare explicit Maven, pip, and GitHub Actions update configurations for the repository manifests and workflows.