A CI pipeline discovers a vulnerable library in an image before deployment. What is the most appropriate remediation workflow?

1. Delete the scan report while deploying the same digest
2. Rename the image tag without rebuilding
3. Increase only the workload's CPU limit
4. Upgrade or remove the affected dependency, rebuild, and rescan the resulting image