Invalid Dependabot config validates successfully

[Mathias Nedrebø]

The following dependabot.yml is validated successfully:

version: 2
updates:
    - package-ecosystem: pip
      groups:
          all:
              "patterns:":
                  - "*"
      directory: foo
      schedule:
          interval: daily
      open-pull-requests-limit: 1
      commit-message:
          prefix: "Dependabot: "

Note the quotes around patterns.

Error is reported by GitHub when viewing https://github.com/<org>/<repo>/network/updates, but only after merging to main branch :( Issue for addressing that here: dependabot/dependabot-core#4605

Error from GitHub: