Suggestion / request: use Dependabot to keep dependencies up-to-date

[greysteil]

First of all, thanks for Canvas and Roll Call!

I've got a suggestion / request: would you be up for using Dependabot to automatically create dependency update PRs for this repo? I ran it against my fork and it generated these PRs. I'll port the aws-sdk-s3 PR over now so you can see what it's like.

I built Dependabot, but I'm honestly only suggesting it because I hope it can save you some time. I'd love any feedback, and whilst obviously having open source repos using Dependabot helps boost its profile, if it's not helpful to you then it's not really worth anything.

You can install it from here or here if you decide to give it a try. It's been through GitHub's security testing (to be allowed in the GitHub Marketplace) and is used by a few thousand organisations, and the source code is here.