Hi folks, I've switched on automatic security fixes to help resolve the alerts.
Best case scenario, the PRs generated will resolve the alerts, and we can rely on them to keep us updated going forward.
Note that fixes come through PRs that need to be approved and merged.