Dependency Update Safety Agent

Projects fall behind on library versions, and catching up in bulk often breaks the build. Each week this agent lists outdated and vulnerable dependencies, reads each one's release notes for breaking changes and groups updates into safe batches, patch versions first. For each batch it updates in a branch, runs the build and tests, and reads the result. If tests fail, it reads the failure and tries the documented migration step. If it still fails, it splits the batch to isolate the library causing the problem and reruns. It drafts a summary of what updated cleanly and what needs manual work. You approve every merge. Edge case: a security fix that requires a major version jump is raised on its own with the migration effort noted.