While dependabot is nice to have, it doesn't natively work with bazel deps so lets integrate it or just disable dependabot alerts.