Consider adding opensafely-cli to our dependency update rota

[tomodwyer]

If we're maintaining it, then we probably should.

OpenSAFELY CLI uses semantic-release to release new versions, so you will need to follow the guide to trigger a release.

[StevenMaude]

Note that there are different update mechanisms here for:

• the developer dependencies
• the pipeline library
• production vendored dependencies