Improve dependency management

[helrond]

Standard ways of managing Python dependencies should be used:

• Create a requirements.txt file with pinned versions.
• Add a dependabot config file so dependencies are regularly checked.

[a-berish]

Stack Overflow: Auto Create Requirements.txt

GitHub: About the dependabot.yml file

RAC dependabot example

[helrond]

In other projects we have been using pip-tools (specifically pip-compile) to generate a requirements.txt file from a requirements.in file. This means that we only have to keep track of top-level dependencies.