Just use mass grave scripts[1] and enable 5 years of security updates.

[1] https://massgrave.dev/