They're currently floating, which is bad practice, but I'd like to keep them current, so enabling dependabot would probably make sense.
They're currently floating, which is bad practice, but I'd like to keep them current, so enabling dependabot would probably make sense.