This is for tracking, here is the original PR https://github.com/dependabot/dependabot-core/issues/7670. For context, we have already seen two consecutive invalid Dependabot PRs on branch v2.0.x