This is probably a simple case where watching for changes in the underlying ghcr.io/datalab-org/datalab-purl container can trigger rebuilds/deployments of this image. The hardest thing to figure out will be whether dependabot works with ghcr.io (as opposed to monitoring docker hub).