NOTICE - dependency updates

[w666]

Due to recent supply chain attacks PRs with dependency updates temporarily are not accepted.

SOAP repo is not affected, but I need to implement a strategy for mitigating such issues.

[smokhov]

@w666 -- you can pin the issue, so it always stays on top