Update Drupal and contrib modules
This is especially relevant after SA-CORE-2019-003.
The point of this project is to run the Drupal and Gatsby sites locally, so you might think that security updates do not matter. I say that you never know what will happen to the project you start, and it is always a good idea to keep up to date.