Implement a test to uncover dependency issues early on:
- alert when a new version is available
- there are potential conflicts
- it is possible to relax pinned version or upper bounds.
set up a nightly that relaxes some of the
requirements and sees what (if anything) breaks. Not breaking is
likely a signal that we should relax ours.