Is there an existing issue for this?

• I have searched the existing issues

Package ecosystem

npm

Package manager version

No response

Language version

No response

Manifest location and content before the Dependabot update

https://github.com/ruffle-rs/ruffle/blob/bee9b434c1a2feaae30660173b7b13c8d21ec5e2/web/package.json

dependabot.yml content

https://github.com/ruffle-rs/ruffle/blob/bee9b434c1a2feaae30660173b7b13c8d21ec5e2/.github/dependabot.yml

Updated dependency

webdriverio 9.18.1 -> 9.19.0

What you expected to see, versus what you actually saw

The bump was only done in package-lock.json (because of transitive dependencies), not directly in package.json.
There is no ignore condition for it (not that was trivial at all to determine this: #2255).

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

ruffle-rs/ruffle#21309
ruffle-rs/ruffle#20948

Smallest manifest that reproduces the issue

No response