Since we're on dependabot now that is where dependencies are kept up to date.