Honestly dependabot is so bad I'm surprised anything other than the smallest projects use it, broken upgrades, lack of configurability, no multi-update PRs etc... and it only runs on GitHub.
I now recommend Renovate to clients which is also free, but a lot smarter.
I now recommend Renovate to clients which is also free, but a lot smarter.
https://github.com/renovatebot/renovate
https://renovatebot.com/