Can we trust tests to automate dependency updates? A case study of Java Projects