This is kind of an epic that pulls together other tasks. Most of the dependencies should be managed by dependabot #1590 eventually.
