Evaluate possibilities of automated dependency bumping

[timobrembeck]

Motivation

At the moment, we tend to forget to update our dependencies manually with the ./tools/update_dependencies.sh tool.

Proposed Solution

Evaluate whether we can use existing tools to periodically update the deps e.g. once a week, e.g.

• dependabot
• renovate bot

Alternatives

• Build a custom CircleCI job which runs periodically once a week and executes the dev tool and opens a PR (this needs a few lines of bash scripting)
• Add a environment manager like e.g. poetry and install the dependencies on the prod systems with poetry as well