Dependabot's now a month late on Python and Go CVEs

Since May, Dependabot's taken a median of 36 days to pick up new Python and Go CVEs from NVD, and criticals are no quicker.