I am using dependabot, grouped dependencies once a week.

We started by having it doing PR for every single dependencies update every day, but that was a little too much noise

But i depends on how big your team is