Ask HN: How do you manage vulnerabilities in the OSS projects you use?

We manually upgrade/patch OSS vulnerabilities in our internal artifactory. I find this process very tedious and time-consuming. How often and what tech do you use to upgrade/patch OSS versions? Is there a way to automated this process?