I wrote up a blog post for the dependabot automation stuff I worked on last month. Figured this could help