Dependabot made that post irrelevant 
https://docs.roots.io/bedrock/master/composer/#updating-wp-and-plugin-versions
Been using it for years for WP + plugin deps, and dependencies in general. My biggest issue with Dependabot is the lack of grouped updates per PR, which is something that is supported by Renovate