Try to avoid huge upgrades but update regularly. Create an automated process that checks at least daily if there are updates and integrate them as fast as possi

Try to avoid huge upgrades but update regularly. Create an automated process that checks at least daily if there are updates and integrate them as fast as possible. Keeping your frameworks up-to-date is important security wise. If you use maven take a look at http://www.mojohaus.org/versions-maven-plugin http://www.mojohaus.org/versions-maven-plugin . This can be integrated into a maven build and it checks if there are any new versions to your dependencies.