dep-update

Automate secure dependency updates by running npm audit, applying patch, minor, and major updates sequentially, creating a backup branch, and running type checks, builds, and tests to validate changes.

The recommended dependency update order applies patch updates first for security fixes, then minor updates for backward-compatible features, and finally major updates manually after checking changelogs.

You can update dependencies in a pnpm monorepo by running recursive updates with pnpm -r update, updating specific packages with the filter flag, and performing a recursive audit.

Validate updated npm dependencies by running TypeScript type checks with tsc --noEmit, verifying the build process with npm run build, and executing the test suite via npm test.

Major dependency updates require special precautions because they may introduce breaking changes, meaning you must manually check each package's changelog before updating and installing.

Create a backup branch before dependency updates to preserve a stable git state, allowing you to easily revert changes if type checks, builds, or tests fail after installing new package versions.