message: Add notes on how to update pinned VS Code Javascript dependencies
  Summary: This happens every few months, and I have to go hunting for the right commands. Write them down.
diff: @@ -26,3 +26,11 @@ You need to have npm v7+ installed. Afterwards, run `npm install` in this folder
  - Run `npm exec vsce package`
  - In VS Code, go to Extensions, click on the "..." button in the Extensions bar, select "Install from VSIX" and then select the `starlark-1.0.0.vsix` file.
  - Build Starlark binary and put it on your `$PATH`, e.g. `cargo build --bin=starlark && cp $CARGO_TARGET_DIR/debug/starlark ~/.cargo/bin/starlark`.
  +
  +## Updating
  +
  +Every few months security advisories will arrive about pinned versions of packages.
  +
  +* `npm audit` to see which packages have security updates.
  +* `npm update` to update the necessary packages.
  +* `npm exec vsce package` to confirm everything still works.
  