**Describe the bug** Outdated software, risky, ... **Expected behavior** Activate the usual DependaBot / CodeQL / secret scanning infrastructure GitHub provides for the repo. See Settings -> Advanced Security