Not the OP, but I can think of a few reasons:

  * security patches
  * browser compatibility changes
  * build tooling compatibility (unless you pin that too, but that never works for long)