You should not update your dependencies in 2026

A brief (irreverent) history of software supply chain security, and what to do about it in the age of AI.