see https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically