I have a PHP Yii2 web project basically using composer (something like pip for Python) that the old project maintainer chose not to use a specific version for dependencies.

I am stunned when I do composer update, because it basically updates every dependencies.

When I asked one of the seniors, he said yea, I have to check every single part of the website and make sure it doesn't break.

I don't know anymore.