You can use Dependabot security updates or manual pull requests to easily update vulnerable dependencies.| GitHub Docs
