Our RELEASE Update Dependencies section states:

Review the rules in build.gradle to ensure the rules make sense. For example, we should not allow major version updates in a patch release. Also ensure that all of the exclusions still make sense.

We should make this more clear what needs to be done and how to do it.

cc @jgrandja