dependency-upgradelisted

# Dependency Upgrade ## When to use Use this skill when `npm audit`, `pip-audit`, or a version check flags an outdated or vulnerable dependency. ## Steps 1. Identify the current and latest versions and whether the bump is major. 2. Read the release notes / changelog for breaking changes between the two. 3. Check the project's lockfile and peer/version constraints. 4. Apply the upgrade, then run the test suite and the build. 5. Summarize the changes, risks, and any code edits the migration requires. ## Examples - "Upgrade requests to the latest secure version" - "Is this major bump of react safe?" ## References Prefer minimal, reviewed bumps; for majors, isolate the upgrade in its own PR so regressions are easy to bisect.