> unlikely to break because of dependency version changes caused by the thirty-seventh party.

With rust you just check in your Cargo.lock file to your VCS and then the versions of your dependencies and their dependencies (etc) are pinned, so if it works now then it will always work. For dependencies on crates.io authors don’t even have the option to remove a version once it’s published.

Upgrading dependencies is an explicit operation, so you only do it when required and run your tests afterwards.

In practice I’ve had far fewer issues with dependency versions using rust than I’ve had using dynamic system libraries in the C/C++ ecosystem