Hello @esasse,
Dependabot PRs will not be decorated due to the fact that they are triggered based on pull_request_target event instead of pull_request.
See related thread here: GitHub comments stopped working in GitHub action after switch to pull_request_target
Best,
Marcin