dependabot[bot] on maven
ok! that last part is the one that i didn't know! thanks @timja!
Regarding the API, no, we can't use user:password for auth with ldap. That's why we need the api token, but there's no way to generate it unless we manually create it or a job does it for us (if it's possible)
That last approach is the one we are testing, but feels very hacky