Use new Dependabot Alert API to simplify previously complex code

[Salim Bensiali]

According to https://github.blog/changelog/2022-04-06-dependabot-alert-api-adds-relevant-update-info-to-the-schema, dependabot alerts are now easily connected to the relevant pull requests.

I was wondering if you are considering leveraging this new feature to simplify the work that had been done here before.

Cheers

[Jeff Widman]

I haven't looked at this in depth, but on the surface it seems to make sense. We'd happily accept a PR!