Update dependency notes

Author: cmoesel

DEPENDENCY-NOTES.md

@@ -1,4 +1,4 @@
-As of Feb Nov 21:
+As of Mar 8, 2026:
 
 The `npm outdated` command reports some dependencies as outdated. They are not being updated at this time for the reasons given below:
 
@@ -11,10 +11,3 @@ The `npm outdated` command reports some dependencies as outdated. They are not b
 - `junk`: major version 4 is an esmodule.
 - `title-case`: major version 4 is an esmodule.
 - `yaml`: changes to `Document.toString()` behavior makes the comments in the config file produced by `sushi init` move around a bunch.
-
-The `npm audit` command reports two vulnerabilities that we currently cannot resolve:
-
-- `lodash`: bundled as a dependency in `fhir` and cannot be overridden. I've asked the maintainers to update the dependency.
-  See: https://github.com/lantanagroup/FHIR.js/issues/72
-- `minimatch`: multiple dependencies use this (mainly dev dependencies) but have not updated yet. We cannot override because
-  the API has changed and is not compatible with the dependencies that use it.