dependabot can also be used for regular version updates