With a perfect drop-in update, code still needs to be tested.

[epic_null@infosec.exchange]

With a perfect drop-in update, code still needs to be tested.

This makes it extra frustrating when Github thinks the "helpful" way to show updated dependecies is... a one at a time pull request.

I have one of me, and many projects. Updating all the dependencies at once means fewer passes on each code. One update, one round of testing, then one release.