Earlier quoted context omitted.
GitHub is looking to add this feature to dependabot: https://github.com/dependabot/dependabot-core/issues/3651
In theory, that works in practice nope. You get a random update with a possible bug inside that is only fixed by a new version that you won't get until later. The other strategy is to wait for a package to be fully stable (no update), and in that case, some packages that receive daily/weekly updates are never updated
Windows is a well-known example; people used to wait for a service pack or two before upgrading.