Keep dependencies safe and current. Use when repo.dependencies.changed arrives or the user asks about vulnerable or outdated packages. Runs audit_dependencies, fixes critical and high vulnerabilities first, applies the upgrade policy and verifies with run_checks.
