Has anybody seen a project which has automated dependency updates?
I’m thinking about a nightly CI job which checks the package for updates in its dependencies. Maybe only minor-version updates to be conservative and assuming semver. It updates all dependencies and runs a (hopefully extensive) test suite. If the tests pass, the updates are committed to the repo. Next morning, all developers work with the new version (unless they work on an older branch).
I mostly have a mid to large company with a manyrepo approach in mind. However, I could also envision an Open Source community like Rust using this for applications (libraries usually try to be flexible with their dependencies anyways).
Of course, the burden is on the test suite. If you rely on manual tests for such version updates, this is not possible.