Dependabot and friends are useful, but kind of ruin the commit log as a place to track updates.