Update docs/SECURITY.md

Co-authored-by: Jonathan Yu <[email protected]>

Author: jsjoeio

docs/SECURITY.md

@@ -7,7 +7,7 @@ The code-server team (and Coder, the organization) care a lot about keeping the
 We use a combination of tools to help us stay up-to-date and fix vulnerabilities.
 
 - [dependabot](https://dependabot.com/)
-  - Automatically keeps code-server up-to-date by updating dependencies in response to security alerts.
+  - Submits pull requests to upgrade dependencies. We use dependabot's version upgrades as well as security updates.
   - See alerts [here](https://github.com/cdr/code-server/security/dependabot).
 - code-scanning
   - [CodeQL](https://securitylab.github.com/tools/codeql/)