skills.rest
JayRHa
JayRHaCOMMUNITY
Explore all skills by this author →
Website𝕏@jannik_reinhardGitHub

dependency-upgrader

Inventory outdated dependencies and upgrade them with auditable commits.

3|2|Updated Jun 9, 2026
Search Tags:#automation#testing#security#rollback#dependencies#semver#upgrade
One-click install
npx skills add https://github.com/JayRHa/AgentSkills --skill dependency-upgrader-jayrha
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-upgrader
Source: https://github.com/JayRHa/AgentSkills/tree/main/dependency-upgrader
Command: npx skills add https://github.com/JayRHa/AgentSkills --skill dependency-upgrader-jayrha

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Inventory outdated dependencies and upgrade them safely with auditable commits.

Core Features & Use Cases

  • Inventory outdated dependencies across ecosystems (npm/yarn/pnpm, Python, cargo, go) and classify upgrades by risk.
  • Plan and execute upgrades one commit at a time, isolating major bumps and validating with tests between steps.
  • Provide a rollback-ready workflow with baseline anchors and clear guidance for resyncing environments.

Quick Start

Run the upgrade workflow to safely bump dependencies in your project with auditable commits.

Frequently Asked Questions about dependency-upgrader

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely upgrade dependencies with auditable commits?▼

Major version migrations are handled by isolating major dependency bumps into separate commits, ensuring tests pass before proceeding. This approach provides a rollback anchor for each step, making it safe to resync environments if a major upgrade fails.

Can I upgrade npm, Python, cargo, and go modules using the same workflow?▼

Yes, the dependency upgrade workflow supports npm, yarn, pnpm, Python, cargo, and go modules. It inventories outdated dependencies across these ecosystems and classifies upgrades by risk to apply them safely.

How do I rollback a dependency upgrade if my tests fail?▼

If tests fail during a dependency upgrade, you can rollback using the baseline anchors provided by the workflow. It enforces green tests between one-upgrade-per-commit steps, ensuring you can safely revert to the last working state.

How are security advisories handled during dependency upgrades?▼

Security advisories are handled by inventorying outdated dependencies and classifying their risk levels before upgrading. The workflow applies security patches using a changelog-driven approach with auditable commits and rollback anchors.

What is the best way to handle dependency bumps during PR reviews?▼

The best way to handle dependency bumps during PR reviews is to enforce a one-upgrade-per-commit workflow with green tests between steps. This changelog-driven process provides clear auditability and rollback anchors for each dependency change.

Related Skills

Explore More Software Engineering Skills→
takutakahashitakutakahashi

build-test-auto

Detect project types and execute build and test commands with failure diagnostics.

Community
Advanced
parisgroup-aiparisgroup-ai
1

project-release

Automate monorepo releases with pre-flight checks, version bumps, changelogs, and atomic git tagging.

Official
Advanced
chicanoandres702chicanoandres702

framework-migration-deps-upgrade

Audit npm and Python dependencies and propose safe upgrade targets.

Community
Advanced
WhatIfWeDigDeeperWhatIfWeDigDeeper
2

package-json-maintenance

Audit and update JavaScript/Node.js dependencies across isolated git worktrees.

Community
Advanced