Hi @andimarek @bbakerman

I've been doing some work with my organization rolling out renovate to help keep our applications up-to-date, patched and secure. Renovate Bot does the heavy lifting of keeping Docker, Java, Javascript (and many other languages) dependency files up to date.

Renovate comes with a GitHub App that can be configured in as little as a few clicks and has a wealth of configuration options available if you don't like the default behavior.

Alternatively now that GitHub has acquired dependabot and are offering it for free, this too could be another option.

I was thinking this would be a useful addition to the repositories under graphql-java, not just for the main graphql-java library but also the extended-validation and extended-scalars to keep them in sync in a low-effort way