Dependabot only started supporting Yarn 2 and 3 in October of last year. Which at that point was over 2.5 years after the release of Yarn 2 itself.