- we don't have an automated process right now - blocked on https://github.com/dependabot/dependabot-core/issues/14752 - I'd rather not cobble something together, let's just wait on dependabot