Kubernetes solves this using Prow, but that might be overkill for us (we don't want/need to run a fully-blown k8s cluster for this thing). Maybe there's some GitHub Action these days that goes into a repo, reads a YAML file or sth, and periodically updates each dependent repo's contents?