Do you use a bot to manage your project's dependencies?

I am currently thinking about the best way to organize libraries in my team's projects.

A colleague of mine has set up renovate to update dependencies automatically, which seems very optimistic to me: you have to trust that updating the dependency does not break the code. Even if you configure renovate to update dependencies only when the semantic version update is a minor or bugfix.

Renovate floods my github notifications, especially when the dependencies are internal libraries that we often update because we are in the development phase.

I smell something wrong in it and I would like to catch advices from different point of view.