Considering using a bot for dependencies updates

[stormshield-gt]

@jmgilman @Haennetz would you be open to adding a bot to automate dependency update?

I was thinking of something like dependabot or renovate, both are free for open source projects.

I think it will ease our maintenance; we will just have to review bot PR.

[Haennetz]

Would love that we can then also enable auto merge.

[stormshield-gt]

I think I will make a PR when I have time then.

then also enable auto merge.

Personally, I don't think auto merging is a good idea; I prefer to check the code that will go on master. This is especially true for vaultrs as the crate publication is made trough the CI.

Renovate can batch dependency update on an issue dash board (like this one) so I think it won't be a pain to review it.