Control external python package dependencies such as `pandas` and `requests`

[Mandera]

Would be awesome if this could update itself periodically, something like;

• Check for major or minor updates every night for all dependencies
• Create pull request
  • Changed python_requires version for dep(s)
  • Bumped version
• Would get annoying if it creates a new PR every night so probably be able to use existing PR somehow
• I wonder if we could create a bigger matrix in GH actions to test all sorts of different external versions

There's probably some existing solutions for this so do some research first

[Mandera]

Consider using pip freeze for a requirements.txt to control dependencies' dependencies