For people complaining that Dependabot is too noisy, it is easy to configure it to only open PRs for major versions. I am a big fan of Dependabot, but maximizi

For people complaining that Dependabot is too noisy, it is easy to configure it to only open PRs for major versions. I am a big fan of Dependabot, but maximizing its effective is highly dependent on the culture of the team/codebase.