ChatGPT suggests library versions that are 12-24 months old and often have CVEs

Yes, this is unfortunate. I would combine your workflow with something like GitHub and Dependabot.