dependency-upgrader

Plans, applies, and validates incremental dependency upgrades for Java/Kotlin and Node.js projects.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/tktaf/codex --skill dependency-upgrader-tktaf
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dependency-upgrader
Source: https://github.com/tktaf/codex/tree/main/skills/dependency-upgrader
Command: npx skills add https://github.com/tktaf/codex --skill dependency-upgrader-tktaf

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of upgrading project dependencies across various ecosystems (Java/Kotlin, TypeScript/Node) with a focus on safety, incremental changes, and clear documentation.

Core Features & Use Cases

  • Multi-Ecosystem Support: Handles Gradle/Maven for Java/Kotlin and npm/yarn/pnpm/bun for Node/TypeScript.
  • Risk-Managed Upgrades: Plans upgrades by grouping them by risk (patch, minor, major) and applies them incrementally.
  • Automated Validation: Runs tests and build commands after each upgrade step to ensure project integrity.
  • Use Case: When a critical CVE is announced for a project's dependencies, this Skill can be used to identify the vulnerable dependency, plan and execute the upgrade, and verify that the project still builds and passes tests.

Quick Start

Use the dependency-upgrader skill to upgrade all minor dependencies in the current Node.js project.

Frequently Asked Questions about dependency-upgrader

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely upgrade npm and yarn project dependencies without breaking changes?

To safely upgrade npm or yarn project dependencies, group upgrades by risk level—patch, minor, and major—then apply them incrementally. Run build and test commands after each step to validate project integrity and catch breaking changes early.

Can I upgrade Gradle and Maven dependencies for Java or Kotlin projects incrementally?

Yes, you can upgrade Gradle and Maven dependencies for Java or Kotlin projects incrementally. The process detects your project type and package manager, applies risk-grouped bumps, and validates the build to ensure stability throughout the upgrade.

What is the best way to fix a critical CVE by upgrading vulnerable project dependencies?

The best way to fix a critical CVE is to identify the vulnerable dependency, plan an incremental upgrade based on risk groups, and execute the bump while running automated validation tests to ensure the project remains stable.

Does dependency management work with pnpm and bun package managers for TypeScript?

Yes, dependency management works with pnpm and bun package managers for TypeScript and Node.js projects. It detects the specific package manager in use and tailors the incremental upgrade and validation process accordingly.

How do I plan and apply major dependency upgrades while minimizing project risk?

To minimize project risk during major dependency upgrades, group changes by risk level and apply them incrementally. Validate builds and tests after each step, and document any breaking changes encountered to maintain clear project records.