For avoiding to miss out on vulnerability fixes and other bugfixes, dependency updates should be automated on all active release branches.