How the Apache community upgrades dependencies: an evolutionary study