a good idea to include dependency updates in commits