Full threadabathur·Thread a few months ago ~about a risk associated with getting habituated to automatic dependency-update PRs and looking at them less critically:https://news.ycombinator.com/item?id=37680443View on HN