Dependabot is an amazing tool for keeping your dependencies up to date, but if you use private packages from a registry other than npmjs, additional configuration is required. Unfortunately GitHub's docs on this topic are quite general, and do not go into covering how to use a private registry like their own GitHub Packages for specific packages, but use npmjs for everything else. Through trial and error I figured things out, and in this post I'll go over how to set up Dependabot to work flawlessly with your private packages from alternate registries.