push: --dry-run updates submodules when --recurse-submodules=on-demand