we do have some dependabot automation there, so I'm less worried about that getting stalled