title: Can dependabot suggest patches for direct dependency?
body: <p>Currently, dependabot suggests only the vulnerable package patch version(fix) but If I need to upgrade only the direct dependency which consumes the fix.</p>
  <ul>
  <li>Is that possible with dependabot?</li>
  <li>Is this feature part of the backlog?</li>
  </ul>