I am really looking forward to “version bumps” without breaking the dependency tree at the very least, something which Dependabot almost gets right. From a sec

I am really looking forward to “version bumps” without breaking the dependency tree at the very least, something which Dependabot almost gets right. From a security use-case perspective, it will be great if it can bump libs that fixes most of the vulnerabilities without breaking my app. Something no tool does today ie. being code and breaking change aware.