[mchahn]

I am always surprised when I hear of developers letting new versions of dependencies go into production. I cannot imagine taking such a chance.

Even if every new version of the total app is tested heavily before production, you lose the inherent stability of shipping the same code that is known stable from the users over time.

Others have said it is important to use new versions of dependencies to get the bug fixes but I don't see that as a good trade-off.