Considering disabling `dependabot` for lib upgrades

[arboleya]

The workflow for this has been quite cumbersome for a few months already.

We should consider if a weekly/manual run of this wouldn't be more efficient.