Change dependencies for security vulnerabilities