dependabot-triagelisted

Triage all open Dependabot and Renovate PRs in bulk: classify each by risk tier (patch / minor / major / security), auto-approve and merge safe patch-only bumps, flag breaking major upgrades with a summary of what changed, and post a digest of what was done. Use when dependency PRs are piling up, when the user says "deal with Dependabot", "triage dependency updates", or "merge the safe ones", or at the start of a maintenance window.
oleg-koval/agent-skills · ★ 3 · AI & Automation · score 75

Install: claude install-skill oleg-koval/agent-skills

> 🤖 *Auto-generated by **weekly-pattern-learner** · obsidian-pr-sync explicitly filters out dependabot/renovate PRs: the user handles them separately, but no skill existed to batch-triage them* # Dependabot Triage Bulk-process open Dependabot and Renovate PRs: approve and merge what is safe, flag what needs a human decision, and report what was done. ## Inputs - **Repository** (optional): default to the current repo. - **Auto-merge policy** (optional, default: `patch-only`): `none`, `patch-only`, or `patch-and-minor`. - **Require CI** (optional, default: on): only merge PRs whose checks are green. ## Step 1: Fetch all open dependency PRs ```bash # Dependabot PRs gh pr list --state open --label "dependencies" \ --json number,title,author,labels,headRefName,url,isDraft \ --jq '.[] | select(.author.login | test("dependabot|renovate"; "i"))' # Also catch Renovate PRs not labelled "dependencies" gh pr list --state open \ --json number,title,author,labels,headRefName,url,isDraft \ --jq '.[] | select(.author.login == "renovate[bot]" or .author.login == "dependabot[bot]")' ``` Merge both result sets, deduplicate by number, skip drafts. ## Step 2: Classify each PR Parse the PR title to extract package name and version change. Dependabot title format: `Bump <package> from <old> to <new>` Renovate title format: `Update dependency <package> to v<new>` or `chore(deps): update <package>` For each P