Set up dependabot, Renovate or some similar tool to keep dependencies up to date

[TheAssassin]

See #78 for instance which had to fix an unrelated build issue because a dependency was never updated.

[probonopd]

With v4 it does not work. I doubt dependabot would be smart enough to propose a PR that works?