dependabot `overrides` compatibility

[mfranzke]

@nmerget dependabot most likely wouldn't update this entry, would it? So we would have some manual process afterwards. I would like to think about automatic solutions (after fixing this problem).