without commenting on the larger discussion, one thing you could do is avoid use of upToNextMajor(_:) in swift-url’s Package.swift.
it may also be helpful to maintain your own fork of important dependencies.
next time, tell them to wait until normal business hours.
customers will demand anything until they get some pushback, that is just how customers are.