database-semaphore repo GitHub updates

I'd like to resolve the GH dependabot alerts across our organizaiton and am assigning this issue to the last person to commit to a repository. If this is not the right person to handle the depndabot alert, please let me know or just reassign to the correct person.

Please either make the change recommended by dependabot or make a comment on this issue if we need to not make the update. It may be this repo is not needed any longer, in which case I will archive it.

database-semaphore has a couple moderate-severity alerts:
https://github.com/Sage-Bionetworks/database-semaphore