Here's how grouping updates, slowing the cadence, and keeping security fixes fast cut the noise on a Microsoft open source project.