https://blog.slashgear.dev/posts/how-to-automatically-handle-dependabot-pull-requests/