README.md

@@ -15,6 +15,13 @@ All commands are run from the root of the project, from a terminal:
 | `npm run astro ...`       | Run CLI commands like `astro add`, `astro check` |
 | `npm run astro -- --help` | Get help using the Astro CLI                     |
 
+## Dependency update guidance
+
+For security/deprecated remediation, allow breaking changes via `npm audit fix --force`, then verify:
+
+- `npm audit`
+- `npm run build`
+
 ## Nix devshell (recommended)
 
 If you use Nix, you can enter a dev shell that provides the required CLI tools for this repo: