The link someone told me about for checking for security patches doesn’t sort by most recent commit, so a recent security commit wasn’t at the top of the list. Perhaps this url should be recommended instead:
https://github.com/discourse/discourse/search?o=desc&q=security&s=committer-date&type=Commits