There are a lot of dependabot updates, some with associated vulnerabilities, which should be landed im happy to do it, but not sure of impact etc