Add dependency management?

[pjhaest]

We do not have a lot of dependencies. Would the following be useful? https://docs.renovatebot.com/

[Roel]

GitHub has something like this built-in these days. But I agree with you that it would not be very useful for us since we don't have a lot of dependencies and, more importantly, do not pin their versions so that security updates should be automatically pulled in when users update their environments.