Ask HN: How to handle automatic upgrades in your sourcecode or Docker images?

How do you keep track of dependencies which need to be upgraded? There are tools like renovatebot, but I am curious if there are other patterns to the solution?

Bazel? Nixos? Distroless?