Dependabot isn't very useful in my view. I would rather have static and build scans (Wiz, Checkmark, etc) telling me about vulnerabilities and blocking critical and highs. Then we can analyze if the vulnerability is exploitable in our system or not. If it is, we can upgrade and deploy ourselves. Even if we were using Dependabot we would still need to do all the testing and deployment steps, which is the much bigger lift.
