Before the migration of defining bolt-specific gems in bolt-vanagon to puppet-runtime a script was used (with no defined frequency) to parse potential updates to the gem dependencies shipped with bolt. https://github.com/puppetlabs/bolt-vanagon/blob/master/generate.rb
We should define some kind of goals or requirements for keeping gems components up to date.
As of today I see about 17 gems with newer versions available.