Basically you have to update dependencies, but GitHub will continue to warn you about them and you need to keep updating other ones. With "critical" etc. labels which really are just as value "typo in readme" or something