[staticassertion]

The PRs are really helpful when you do actually want to update.

[gherkinnn]

You can have Dependabot create a PR by hitting a button somewhere in the vulnerability details.