Just for reference, this is actually mentioned explicitly in the Pkg docs:
Simply calling
upwill try to update all the dependencies of the project to the latest compatible version. Sometimes this is not what you want. You can specify a subset of the dependencies to upgrade by giving them as arguments toup