Wasn't sure where to add this issue :-) To ensure vulnerabilities are mitigated, and to 'bump' dependencies, configure renovatebot, or dependabot. Thanks, Chris