Update dependency versions.
If there are no actual updates to report, a message should not be sent.