tell me why i need to update 12 dependencies just to get a single minor version bump for a library