Note: while not proactive like this idea suggests, the VSCode CircleCI plugin does do this. As you're editing your config.yml, it'll tell you if any of your orbs has a newer version available.

Renovate has this built in, we are migrating from dependabot to renovate and are removing our names from the feature request.

As it appears that no work appears to have been scoped for this yet (1year+ with no progress) our organization has both self hosted orbs as well as community hosted orbs. We would like to be able to have this update authenticated orbs.

We would also like this to run on a scheduled basis that is unrelated to our CICD pipelines without doing something strange such as scheduling a weekly deploy. Perhaps this would best be a github/bitbucket/gitlab plugin.