That is fine, but note that 2 days a year is about 1% of work time, and that time increases as the code size increases.

Moreover, in some companies you cannot simply update external dependencies without extra painful reviews.