We update all our dependencies weekly. It's mostly automated. This is the way it should be. It's not particularly hard.