renovatebot and dependabot can take care of that. Setting up CI is progress, nothing to regret.