Absolutely not. If you neglect keeping your packages up to date, it tends to get exponentially harder to upgrade them when you do need that critical bugfix.
Yeah, this. I worked on a project that used an older version of Java, and had older versions of dependencies, and never updates because there was 'no reason'... until we hit a really nasty perf bug that was fixed in a newer version of the library... that was years newer... Made even better by the fact that it was a pretty core library and had tons of intertwined dependencies that also needed to be updated :(