deal with dependabot updates and failures

As a developer/release manager I would like for dependabot's updates to be applicable. At the moment all GHA for dependabot's PRs fail the updates do not seem to be appropriate even when the simplest tiny upgrades are attempted. It would be nice to be able to just apply these.
This situation mostly applies to the JS updates, but also mvn updates fail when attempted.