https://github.com/renovatebot/renovate may provide more flexibility to manage our dependency chain when dealing with web-specs/reffy cascading updates