Updating dependencies can be a major change. It can also be a security fix. Marking it as a simple chore sounds like the impact has not been fully analyzed. I

Updating dependencies can be a major change. It can also be a security fix. Marking it as a simple chore sounds like the impact has not been fully analyzed. I understand the practice and if done meticulously by all contributors, it should at least signal a well organized project but most of the time, it just shovels your entire commit log as a release notes. It's OK to have it, but I much prefer projects that takes time to summarize the impacts to their users.