As an extension to Murphy's law, critical security updates for your dependencies come in at the least convenient time possible. That's one reason why it's a good idea to keep your dependencies up to date, so that upgrading on short notice doesn't turn into a nightmare full of yaks and blunt shears.
