Update dependencies deliberately
Change a dependency when you can identify the required fix or feature and the affected callers. Read its version constraints and inspect the resulting lockfile change.
Build from a clean dependency state when verifying a release. Test the integration behavior rather than relying solely on compilation. For frontend dependencies, check the generated assets and the browser as well.
Keep unrelated dependency updates out of a focused application change. Document any configuration or runtime requirement that changes with the update.