dependency-upgrader

Inventory outdated dependencies and upgrade them with auditable commits.

3|2|Updated Jun 9, 2026

Search Tags:#automation #testing #security #rollback #dependencies #semver #upgrade

Ready to run

npx skills add https://github.com/JayRHa/AgentSkills --skill dependency-upgrader-jayrha

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-upgrader
Source: https://github.com/JayRHa/AgentSkills/tree/main/dependency-upgrader
Command: npx skills add https://github.com/JayRHa/AgentSkills --skill dependency-upgrader-jayrha

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Inventory outdated dependencies and upgrade them safely with auditable commits.

Core Features & Use Cases

Inventory outdated dependencies across ecosystems (npm/yarn/pnpm, Python, cargo, go) and classify upgrades by risk.
Plan and execute upgrades one commit at a time, isolating major bumps and validating with tests between steps.
Provide a rollback-ready workflow with baseline anchors and clear guidance for resyncing environments.

Quick Start

Run the upgrade workflow to safely bump dependencies in your project with auditable commits.

Frequently Asked Questions about dependency-upgrader

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I safely upgrade dependencies with auditable commits?▼

Major version migrations are handled by isolating major dependency bumps into separate commits, ensuring tests pass before proceeding. This approach provides a rollback anchor for each step, making it safe to resync environments if a major upgrade fails.

Can I upgrade npm, Python, cargo, and go modules using the same workflow?▼

Yes, the dependency upgrade workflow supports npm, yarn, pnpm, Python, cargo, and go modules. It inventories outdated dependencies across these ecosystems and classifies upgrades by risk to apply them safely.

How do I rollback a dependency upgrade if my tests fail?▼

If tests fail during a dependency upgrade, you can rollback using the baseline anchors provided by the workflow. It enforces green tests between one-upgrade-per-commit steps, ensuring you can safely revert to the last working state.

How are security advisories handled during dependency upgrades?▼

Security advisories are handled by inventorying outdated dependencies and classifying their risk levels before upgrading. The workflow applies security patches using a changelog-driven approach with auditable commits and rollback anchors.

What is the best way to handle dependency bumps during PR reviews?▼

The best way to handle dependency bumps during PR reviews is to enforce a one-upgrade-per-commit workflow with green tests between steps. This changelog-driven process provides clear auditability and rollback anchors for each dependency change.