Fleet hygiene: audit dependabot.yml across all apps (target-branch coverage)

[rubenvdlinde]

Context

Today 3 PRs landed retargeting fix(ci): dependabot should target development per branching strategy on nldesign, openbuilt, shillinq. But a sample API check across the fleet shows none of these have a target-branch directive in their .github/dependabot.yml:

openregister, opencatalogi, openconnector, docudesk, procest, planix, nextcloud-vue — all returned "no target-branch directive" (either no file at all, or file lacking the directive).

This means dependabot is either inactive on those repos, or it's opening PRs against the default branch (main → wrong per [[feedback_feature-branches-from-dev]]). Either failure mode is silent.

Action

• Inventory all Conduction app repos and their current dependabot.yml state
• For repos missing it: add canonical config (npm + composer ecosystems, target-branch=development, target-branch=beta for nextcloud-vue per its exception)
• For repos with it but no target-branch: add the directive
• Land as a coordinated fleet PR wave