dependabot #201
Description
Once we get a handle on the dependencies, let's get dependabot running for real to stay on top of them. It will be a one time pain, but hopefully better as we go with the cleaner dependencies and not having to pin deps as much with UV