Dependabot no longer infers .npmrc - GitHub Changelog

Dependabot will no longer attempt to infer .npmrc configuration for npm private registries. Previously, Dependabot tried to reconstruct .npmrc contents from lockfile resolved URLs, but incorrect lockfile URLs, lockfile format…

Raccontata dagithub.blog