I put the dependabot.yml file in .github and it sent me two PRs that I did not understand. What are those PRs for?