Keep dependencies up to date

Other projects have started using a renovate bot. We should look into this as well.