When one updates internal dependency versions one usually has to find them. At least that was the story with my gigs. So there's a listing somewhere. So you wo

When one updates internal dependency versions one usually has to find them. At least that was the story with my gigs. So there's a listing somewhere. So you wouldn't get a random version even considered. Version shadowing and overriding is a totally different concern of course.