I think your wording there is incorrect and very misleading, even if you do understand it. You say > Cargo selects the latest version of a new dependency and i

I think your wording there is incorrect and very misleading, even if you do understand it. You say > Cargo selects the latest version of a new dependency and its own new dependencies but that's not true; it selects the "latest semver-compatible minor version", which is a pretty different thing. The way you've phrased it makes it seem like cargo just flat out selects the newest version period (which can cause breaking changes and a whole lot of pain). So of course "people are frequently surprised", your actual statement is incorrect and misleading. "Blindly updating to new versions" is a completely different (and scary) proposition from "updating to semver compatible minor versions". The latter still has its issues (I think the maximally minimal approach that vgo is taking is a pretty neat solution to this and some other issues) but it's a much more contained set of issues.