Even with ^ you won't get an updated version until somebody runs an install and updates the lockfile. We have things like dependebot for this. https://docs.gi

Even with ^ you won't get an updated version until somebody runs an install and updates the lockfile. We have things like dependebot for this. https://docs.github.com/en/code-security/tutorials/secure-your-dependencies/dependabot-quickstart-guide https://docs.github.com/en/code-security/tutorials/secure-yo...