skills.rest
peterfox
peterfoxCOMMUNITY
Explore all skills by this author →
Website𝕏@peterfoxGitHub

composer-upgrade

Identify and execute safe Composer upgrades for PHP projects with advisories and dependency constraints.

25|Updated Feb 22, 2026
Search Tags:#security#php#dependencies#audit#composer#upgrade
One-click install
npx skills add https://github.com/peterfox/agent-skills --skill composer-upgrade
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: composer-upgrade
Source: https://github.com/peterfox/agent-skills/tree/main/composer-upgrade
Command: npx skills add https://github.com/peterfox/agent-skills --skill composer-upgrade

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Guides teams to upgrade PHP dependencies safely by using Composer commands, audits, and conflict resolution.

Core Features & Use Cases

  • Identify outdated dependencies via composer outdated and analyze advisories with composer audit.
  • Resolve blockers using composer why-not and composer why to map dependency constraints.
  • Preserve stability by proposing safe upgrade paths, running non-interactive commands, and re-auditing after changes.

Quick Start

Ask Claude Code to guide you through auditing, upgrading, and validating PHP dependencies with Composer.

Frequently Asked Questions about composer-upgrade

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely upgrade PHP dependencies with Composer?▼

Safely upgrade PHP dependencies by running composer outdated to identify updates and composer audit to check advisories. Apply safe upgrade paths, resolve conflicts using composer why-not, verify with tests, and re-audit to ensure all advisories are resolved.

Why does composer update fail due to dependency conflicts?▼

Dependency conflicts occur when package constraints block upgrades. Use composer why-not to map specific dependency constraints and composer why to trace which packages require the conflicting versions, then apply safe bump workflows to resolve them.

How do I check PHP dependencies for security advisories?▼

Check PHP dependencies for security advisories by running composer audit. This identifies known vulnerabilities in installed packages, allowing you to prioritize and execute safe upgrades to resolve all detected security issues.

What's the best way to diagnose Composer lockfile issues?▼

Diagnose Composer lockfile issues by using composer outdated to identify stale dependencies and composer why-not to analyze version constraints. This maps dependency constraints to pinpoint blockers and propose safe upgrade paths.

Can I upgrade direct dependencies without breaking PHP version compatibility?▼

Yes, upgrade direct dependencies safely by analyzing dependency constraints against your PHP version. Use composer why to trace requirements, apply non-interactive bump workflows, verify with tests, and re-audit to ensure stability and compatibility.

Related Skills

Explore More Software Engineering Skills→
KILWA73KILWA73

dependency-compatibility-checker

Validate dependency constraints and generate resolutions blocks for peer-dependency conflicts.

Community
Advanced
TheSpiciestDevTheSpiciestDev

monitor-ci

Monitor Nx Cloud CI pipelines and apply automated fixes for common build failures.

Community
Advanced
u9401066u9401066

test-generator

Generate pytest, mypy, ruff, bandit, and Playwright test suites for Python codebases.

Community
Advanced
Muath2000Muath2000

network-scanner-engineer

Build and manage network scanning engines for asset discovery and vulnerability detection.

Community
Advanced