why do i always have to update every single dependency for some tiny minor version bump? can't it just install what it needs and leave the rest alone