Hi @cclauss, thanks for the heads-up on this!

The build is failing due to the updated flake8-bugbear plugin complaining about our use of @lru_cache. This is being fixed in #340. Please wait for that to be merged (review appreciated!) and then rebase this one on top of master. That should fix the failure.

@akaihola You can use dependabot for module and actions update

Last time I tried out dependabot it didn't understand setup.cfg files. Maybe that's fixed now? And I didn't know it does actions as well!

I actually tried to contribute a fix to support setup.cfg in dependabot/dependabot-core#2133, but my approach was not considered appropriate, and the issue is still open.

Oh, but now that I reviewed what happened back then, the big thing probably was that GitHub didn't run its integrated Dependencies Graph using dependabot anymore. So we may actually be talking about different things here @roniemartinez. I guess you're proposing to install and run dependabot in a GitHub Workflow, not about relying on GitHub's built-in dependency scanning?

Thanks @cclauss and @brtknr!