The mergify config has been copied from retest/recheck/.mergify.yml with the status checks removed. Although we most probably will not have a release process here, I did not modify anything else, just to eliminate any diverging versions (status checks should be handled by the branch protection rules).

I would also recommend to enable dependabot (either via the web interface or via .dependabot/config.yml), so that we do not have to update the dependency versions manually.

However, I would argue that we want:

1. a build for that (Travis or GitHub Actions)
2. enable branch protection with
   1. "Require pull request reviews before merging"
   2. "Require status checks to pass before merging"
   3. "Require branches to be up to date before merging"
   4. "Enable status checks"
   5. "Include administrators"