Are we planning on merging or closing any of those dependabot PR's? It looks like quite a few of them are > 1 week old.