This is true, but in our case all dependencies are vendored and frozen. We _do_ have instances where target systems for deployment become ABI/API incompatible

This is true, but in our case all dependencies are vendored and frozen. We _do_ have instances where target systems for deployment become ABI/API incompatible with the libraries, which is rare and happens roughly every 5 years. The project was structured to put stability at the core, rather than being cutting edge.