Update the vulnerable direct dependencies