Automated dependency updates done right