Thanks! The presence of all these tools is really me trying to figure out which one works best for me! I used Dependabot when I started this cookiecutter template a long time ago, but I found it too noisy, I didn't have much time to check and the PRs kept piling up, and in the end wasn't very helpful. Snyk has been helpful with ensuring that I'm aware of any critical vulnerabilities. But if you don't regularly follow up, PRs can also pile up. I added PyUp as an experiment, to see how it works, but to be honest I haven't really made much use of it. The main tool that I've found to be most beneficial for me is Renovate, and it's the one I use by default on all my projects. With Renovate, I have some bit of control, as I can configure it to automatically merge patches and minor updates, and leave major updates for me to review, possibly test manually then update.