Policy when dependencies break on updates?