dependency-upgrade

Solid

Use when a dependency is outdated or has a known vulnerability and you need to upgrade it safely with the right changelog and migration notes.

AI & Automation 1 stars 0 forks Updated 4 days ago MIT

Install

View on GitHub

Quality Score: 78/100

Stars 20%
10
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
37
Issue Health 10%
80
License 10%
100
Description 5%
100

Skill Content

# Dependency Upgrade ## When to use Use this skill when `npm audit`, `pip-audit`, or a version check flags an outdated or vulnerable dependency. ## Steps 1. Identify the current and latest versions and whether the bump is major. 2. Read the release notes / changelog for breaking changes between the two. 3. Check the project's lockfile and peer/version constraints. 4. Apply the upgrade, then run the test suite and the build. 5. Summarize the changes, risks, and any code edits the migration requires. ## Examples - "Upgrade requests to the latest secure version" - "Is this major bump of react safe?" ## References Prefer minimal, reviewed bumps; for majors, isolate the upgrade in its own PR so regressions are easy to bisect.

Details

Author
NSBen
Repository
NSBen/skillfoundry
Created
4 days ago
Last Updated
4 days ago
Language
Python
License
MIT

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Listed

dependency-upgrade

Manage major dependency version upgrades with compatibility analysis, staged rollout, and comprehensive testing. Use when upgrading framework versions, updating major dependencies, or managing breaking changes in libraries.

5 Updated today
immacualate
AI & Automation Listed

dependency-upgrade-planner

Plan and de-risk a major dependency, framework, or runtime upgrade — map the full version path, read every intermediate migration guide, and pin the breaking changes to your actual call sites instead of bumping the number and hoping. Use when a key dependency is several majors behind, when a security advisory forces an upgrade, or before a framework migration.

1 Updated 1 weeks ago
imtiazrayhan
Code & Development Listed

dependency-upgrade

Bring a repo's dependencies up to the latest versions across JavaScript (npm/pnpm/yarn), Ruby (bundler), Python (uv/poetry/pip), and GitHub Actions — reading changelogs/migration guides for major bumps, applying the needed code changes, and landing each step as its own verified commit. Use when the user wants to "update my packages", "upgrade dependencies", "bump deps to latest", "check for outdated packages", or do this across all their repos (fleet mode). Gates every commit on a green test suite; defers any major it can't get green to a written report. Pairs with the github-actions skill (Actions pins) and respects dev-env-setup's 4-day dependency cooldown.

0 Updated yesterday
mickzijdel