Depends on the package manager. With some you'll get the oldest transitive deps that meet all dependency requirements, not the newest.