update all local repos, safely