See https://github.com/lxqt/lxqt.github.io/security/dependabot 