Upgrade Strategy?

I was just wondering if there are any best practices regarding package.json and bower.json. We’ve just started a new app and the team has hit a few bumps with having most packages set to upgrade minor versions automatically. I was just wondering what strategies people are using to deal with dependencies. My concern is that locking versions or going to just upgrading patch versions will see our codebase stagnate. This happened to our last Ember app which got stuck on RC6.

Anyway, any advice would be appreciated.

Thanks!

We use a remote branch in git for a clean ember-cli. With every ember-cli update we update this branch. We then fetch and merge this in all projects. You can use http://greenkeeper.io/ to keep all other npm packages up-to-date. We have nothing for bower.