This assumes that the components are upgraded at the same time, but that is
an assumption we need to make for sane versioning. This assumption is already
made (for example) in the framework-bundle 4.2 recipe, whose config/bootstrap.php
file references a DotEnv 4.2 method