does anyone else have thoughts about systematically keeping external (JVM) dependencies up to date in pants?