GitHub dependabot follows a strict 5 day work schedule. It has no configuration option to make it check on weekends:
docs.github.com/en/code-securi
GitHub supports scheduling notifications to arrive during a certain schedule so the only explanation is that GitHub bots are unionized.
