At a company I worked at, we had the usual Dependabot setup. We grouped dependencies where it made sense and had it open PRs with updates every week. After a while though, I started getting a bit annoyed with the workflow around it.
Source: [Hacker News](https://github.com/josipmusa/greenbatch)