Thanks, but I get the impression that if I have [workspace], then merely / in directories: makes dependabot submit PRs for subprojects.
What I (may) want is keep using workspaces, but not have dependabot submit PRs for subprojects.
(I see now that this is an open question, haven’t seen this when I read this PSA last.)