Aka “the diamond dependency problem”. If the “old” A has a severe vulnerability and the “new” A has breaking changes - then there is no solution other than to

Aka “the diamond dependency problem”. If the “old” A has a severe vulnerability and the “new” A has breaking changes - then there is no solution other than to avoid/replace/fork B until B is upgraded.