A tool like renovate can open PRs against our repos automatically when our semver rules in package.json doesn't match the latest anymore. ie. if we track a minor and a new minor/major comes out or if we track a major and a new major comes out.

CI would then run on the PR and the PR would (hopefully) go red if it requires work to support the new version. The tools usually include the changelog or at least a link to the commit range in the PR description so you can easily scan through it to see if there are breaking changes to look out for.

This would give us an "evergreen" app and be an important step towards being able to quickly incorporate security fixes. It also means our dependencies won't rot and is useful for preventing walls of deprecation and unmaintained warnings/errors.