There's been a couple of incidents where it seems the Dependabot is not "smart" enough for our needs. Before the org move, we were looking at incorporating Renovate Bot to take over instead.
This issue is meant to continue this exploration after the closer of #129 .