just spent 20 minutes troubleshooting a weird issue with a dependency in my project and finally figured out it was caused by a minor version bump in a transitive dependency, can't we just have a sane dependency tree for once?