deps-update

Audit and update repository dependencies across npm, poetry, and cargo ecosystems.

3|Updated Mar 1, 2010

Search Tags:#changelog #compatibility #dependencies #updates #lockfile #batch-updates #security-urgency

Ready to run

npx skills add https://github.com/harleypig/dotfiles --skill deps-update-harleypig

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: deps-update
Source: https://github.com/harleypig/dotfiles/tree/main/config/claude/skills/deps-update
Command: npx skills add https://github.com/harleypig/dotfiles --skill deps-update-harleypig

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Outdated dependencies drift across ecosystems; this skill coordinates proactive currency updates to keep dependencies current while maintaining stability.

Core Features & Use Cases

Inventory outdated direct dependencies across ecosystems and evaluate upgrade types (patch/minor/major) with ecosystem-specific commands.
Triage upgrades by risk and urgency, prioritizing security-urgent bumps and isolating potential breaking changes.
Read release notes to flag breaking changes and migrations before applying updates.
Apply updates in safe batches (patch + minor together; major separately) and regenerate lockfiles.

Quick Start

Run a targeted dependency sweep on your repository to inventory outdated deps and begin safe upgrades.

Frequently Asked Questions about deps-update

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I batch update outdated dependencies across different ecosystems like npm and cargo?▼

To batch update outdated dependencies across ecosystems like npm and cargo, inventory direct dependencies, then apply patch and minor upgrades together while isolating major bumps. Regenerate lockfiles and gate each batch with a qa-check.

How does changelog analysis help triage dependency upgrades by security urgency?▼

Changelog analysis triages dependency upgrades by reading release notes to identify security-urgent bumps and flag breaking changes. This mechanism ensures high-risk vulnerabilities are prioritized while potential breaking changes are isolated.

What's the best way to safely upgrade major version dependencies without breaking my repository?▼

The best way to safely upgrade major version dependencies is to isolate major bumps from patch and minor updates, read the release notes for migration steps, and gate the update batch with a qa-check before proceeding.

Can I use automated dependency updates for multi-ecosystem projects including poetry and npm?▼

Yes, you can apply dependency updates across multi-ecosystem projects like poetry and npm. The process evaluates upgrade types using ecosystem-specific commands and regenerates lockfiles to maintain stability across all environments.

When should I separate major dependency upgrades from minor and patch updates?▼

You should separate major dependency upgrades from minor and patch updates when triaging by compatibility and changelog significance. This isolation prevents potential breaking changes from disrupting safe batches of patch and minor dependency bumps.

Why do lockfiles need to be regenerated after applying safe batches of dependency updates?▼

Lockfiles need to be regenerated after applying safe batches of dependency updates to ensure the repository reflects the exact resolved versions. This maintains stability and consistency across the multi-ecosystem project environments.