Set up Renovate or Dependabot to automate dependency updates

[sschuberth]

To avoid manual work, I suggest to set up Renovate (or Dependabot) automate dependency updates. Created PRs can be manually closed in case of undesired updates, or tools can be configured to not automatically bump e.g. the Kotlin version.

[jmongard]

Yes, this is a good idea. Last time I was thinking of this Githubs Dependabot feature did not support gradle but that was years ago.
Never heard of Renovate before but it looks like a good option.
I'm currently on vacation so I will not do anything about it right now.