Managing and assessing the risk of component upgrades