What's the way to prevent (in CI) new dependencies being added to the repo without being approved?

Have large mono repo and keep running into surprise discoveries of new dependencies being added do not align with our existing tech decisions.

Wanting to find some sort of way to control which dependencies we are using.