Look at http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=2&chap=1 It makes it sound like emerge --update world doesn't update direct dependencies.
(In reply to comment #0) > Look at http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=2&chap=1 > > It makes it sound like emerge --update world doesn't update direct > dependencies. > "Portage will then search for newer version of the applications you have installed. However, it will only verify the versions for the applications you have explicitly installed - not the dependencies. If you want to update every single package on your system, add the --deep argument:" [. . .] "Since security updates also happen in packages you have not explicitly installed on your system (but that are pulled in as dependencies of other programs), it is recommended to run this command [emerge -uD world] once in a while." It's pretty straightforward to me.
(In reply to comment #1) > "Portage will then search for newer version of the applications you have > installed. However, it will only verify the versions for the applications you > have explicitly installed - not the dependencies. If you want to update every > single package on your system, add the --deep argument:" Then the Handbook is incorrect, see `man emerge`: --deep (-D) When used in conjunction with --update, this flag forces emerge to consider the entire dependency tree of packages, instead of checking only the immediate dependencies of the packages. As an example, this catches updates in libraries that are not directly listed in the dependencies of a package.
I'll take this one after some consultation with jkt on IRC.
Made even clearer; thanks to jkt for discussing on IRC. Fixed in CVS.