deps-triage

Triage dependency pull requests from automated bots into SAFE, LOOK, and STUCK categories.

3|Updated Jul 30, 2023
One-click install
npx skills add https://github.com/danielcopper/dotfiles --skill deps-triage
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: deps-triage
Source: https://github.com/danielcopper/dotfiles/tree/main/claude/.claude/skills/deps-triage
Command: npx skills add https://github.com/danielcopper/dotfiles --skill deps-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh.

What problem does it solve?

This Skill solves the bottleneck of manually reviewing and merging dozens of automated dependency and chore PRs by providing a structured, classified overview of their status and safety.

Core Features & Use Cases

  • Automated Triage: Collects and categorizes open PRs from bots like Dependabot or Renovate into SAFE, LOOK, and STUCK buckets.
  • Contextual Analysis: Evaluates CI status, breaking changes, and auto-merge progress to provide actionable insights.
  • Use Case: Use this when your repository has accumulated a backlog of dependency updates and you need to quickly identify which ones are safe to merge without manual inspection of every individual PR.

Quick Start

Ask the deps-triage skill to list all open dependency PRs and merge the ones classified as safe.

Frequently Asked Questions about deps-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically triage and merge dependency pull requests from bots like Dependabot?

Automated dependency PR triage queries GitHub PR metadata via the gh CLI to classify Dependabot and Renovate pull requests into SAFE, LOOK, and STUCK buckets based on CI health and breaking change risk. This structured overview lets you quickly identify and merge safe updates without manual inspection of every individual PR.

What is the best way to manage a backlog of automated dependency updates on GitHub?

The best way to manage a backlog of dependency updates is to automate triage by evaluating CI status, breaking change risk, and auto-merge progress. Categorizing bot pull requests into safety buckets provides actionable insights, allowing you to safely merge updates in bulk rather than reviewing each PR individually.

Do I need the GitHub CLI installed to automate dependency PR management?

Yes, you need the GitHub CLI (gh) installed and authenticated to automate dependency PR management. The triage process relies on the gh CLI to query GitHub PR metadata, perform status checks, and execute merge operations on automated dependency and chore pull requests.

How does automated PR triage classify which dependency updates are safe to merge?

Automated PR triage classifies dependency updates as safe by querying GitHub PR metadata to assess CI health, breaking change risk, and auto-merge status. Pull requests are sorted into SAFE, LOOK, and STUCK categories, providing actionable insights to determine which updates can be merged without manual inspection.

Can I use this automated triage for chore pull requests as well as dependency updates?

Yes, you can use this automated triage for chore pull requests in addition to dependency updates. The process collects and categorizes open PRs from automated bot accounts like Dependabot and Renovate, evaluating CI status and breaking changes to provide a classified overview of both dependency and chore pull requests.

Why are my automated dependency pull requests stuck and not auto-merging?

Automated dependency pull requests may be stuck due to failing CI status checks, detected breaking change risks, or stalled auto-merge progress. The triage process evaluates this GitHub PR metadata to categorize stuck PRs, helping you identify exactly what is blocking the auto-merge operations.