Upgrading dependencies already checked for package updates before running
the upgrade task. Plugins didn't have that mechanism in place and that
made upgrading plugins over hex trickier since users could be stuck a
long time without running an update manually.
This fix mostly readapts existing dep code to the context of plugins to
look them up one at a time and run the update as part of the upgrade.