Dependabot
Dependabot's core logic for creating update PR's
...Check for the latest version of a dependency that's resolvable given a project's other dependencies. Generate updated manifest and lockfiles for a new dependency version. Generate PR descriptions that include the updated dependency's changelogs, release notes, and commits.