verify checked out dep is the same as specified in the config and update if not