Plan and execute dependency upgrades with risk assessment, changelog review, and verification. Use whenever the user wants to bump packages, resolve CVEs, upgrade a major version, interpret dependency conflicts, or update lockfiles safely.