Even with an extensive test suite I would not be comfortable automating public dep updates. But, I guess you could set up a whitelist for internal modules that

Even with an extensive test suite I would not be comfortable automating public dep updates. But, I guess you could set up a whitelist for internal modules that your own org manages to propogate uptades up to deployment.