Dependency upgrade process

Hi,

I would like to grasp your opinion about how do feel about the
following upgrade process of dependencies:
- Dependabot prepares PRs with upgraded dependencies
- if this is patch upgrade and all the tests have passed, we can
approve and merge the PR (no dedicated JIRA ticket)
- if this a major/minor upgrade or tests are failing, we have to
create a ticket in JIRA (to let users know what to expect)

Do you have any objections?


Regards
Łukasz