What problem does it solve? Manually reviewing every Dependabot pull request is repetitive and time-consuming, especially when a repository accumulates many dependency updates. This Skill automates the triage, review, and merging of Dependabot PRs directly from your local terminal, applying a risk-appropriate strategy to each update type. ## Core Features & Use Cases - Semver-based triage: Automatically classifies each PR as patch, minor, or major by parsing the version bump in the PR title, then applies a matching review strategy. - Tiered review strategy: Patch updates get a quick diff check plus approve and auto-merge; minor updates get diff and release-note review; major updates receive a detailed comment only, with no merge. - Project impact analysis: Uses Grep to check whether changed APIs, functions, or types are actually used in your codebase, and records findings in the review comment. - Use Case: You return from vacation to find 15 open Dependabot PRs on your repository. Run the skill to review each one, auto-merge the safe patch and minor updates, and receive a summary table of every action taken. ## Quick Start Run /dependabot-review in the repository directory to review and merge all open Dependabot pull requests, optionally filtering with patch, minor, major, or all.
