Add dependency check during update

[stringbean]

It would be good to prompt users to update the lockfile during the update phase in addition to the explicit dependencyLockCheck task.

Ideally this would be an opt-out feature.