How do you apply security updates to the dependencies?
In modern Java world people often maven or another project tool where upgrading a library is as simple as changing the version number in a "pom" file, push and wait for Jenkins to finish build, unit and integration tests.
Not kidding here, this is one of the things I love about Java development.
EDIT: To give you a chance to catch those regressions, at least.