At the moment, we get large numbers of updates we can't take, at least as long as we support EOL versions of Python. It's unclear to me that we gain anything from having dependabot running given this?

See also: web-platform-tests/rfcs#200.