https://foojay.io/today/using-bots-to-keep-dependencies-updated/