Not a downvoter, but when I saw your reply it made me think that you may need a better process around maintaining dependencies. At least IMO, best practice is

Not a downvoter, but when I saw your reply it made me think that you may need a better process around maintaining dependencies. At least IMO, best practice is to continually evaluate and adopt updates to dependencies. I’d rather have a slow trickle of problems associated with continuous updates, than have a total firefight when you realize you have to upgrade, now, and you have neither solid plans and practice in place to do so, nor the time because you’re in the middle of yet another feature drop that is pushing tech debt to the breaking point. Setting and forgetting dependencies is like saying you have a backup somewhere, but never actually testing if you can recover from it. That’s the kind of thing that could turn a routine outage into a crippling emergency.