Currently nothing updates python dependencies automatically, there should be something that at least complains when they are out-of-date...

• The dependencies are hash pinned so I'm not sure dependabot is usable for this?
• There is a make target for updating requirements/*.txt but the files need to be deleted first