deps-update

Name: deps-update
Availability: InStock
Author: Nanoka

Run pnpm outdated and audit to create dependency update PRs and issues.

Updated May 2, 2026

Search Tags:#issue management #dependency audit #dependency update #repository automation #PR creation

Ready to run

npx skills add https://github.com/nanokajs/nanoka --skill deps-update-nanokajs

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: deps-update
Source: https://github.com/nanokajs/nanoka/tree/main/.claude/skills/deps-update
Command: npx skills add https://github.com/nanokajs/nanoka --skill deps-update-nanokajs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pnpm, git, github-api, and includes scripts (resource) components.

What problem does it solve?

This Skill streamlines the process of updating dependencies, creating PRs, and raising issues for further evaluation, providing a structured workflow from start to finish.

Core Features & Use Cases

Automated Dependency Update: Runs pnpm outdated and pnpm audit to identify outdated and vulnerable dependencies.
Structured PR Creation: Generates patch PRs for immediately fixable dependencies and raises individual issues for dependencies requiring further assessment.
Issue Management: Updates existing issues and creates new ones for major bumps that require further evaluation.

Quick Start

Run the deps-update skill to initiate the automated dependency update process and issue creation workflow.

Frequently Asked Questions about deps-update

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate dependency updates and create PRs for a pnpm project?▼

To automate dependency updates, you can run a workflow that executes `pnpm outdated` and `pnpm audit` to identify vulnerable packages, automatically generating pull requests for immediate fixes and issues for major bumps requiring further evaluation.

What is the best way to manage major dependency version bumps that need further evaluation?▼

The best way to manage major dependency bumps is to use an automated workflow that creates individual GitHub issues for each outdated package, isolating them for manual assessment while applying patch updates through separate pull requests.

Do I need pnpm and GitHub actions to automate repository dependency audits?▼

Yes, you need pnpm and GitHub actions to automate repository dependency audits, as the workflow relies on pnpm for package management and the GitHub API for creating pull requests and managing issues within the repository context.

Can I separate immediate patch updates from vulnerable dependencies requiring manual review?▼

Yes, you can separate immediate patch updates from vulnerable dependencies by running an automated process that generates patch PRs for safe fixes and raises individual issues for dependencies needing further manual review.

How does issue management work when updating outdated dependencies in a repository?▼

Issue management during dependency updates works by updating existing issues and creating new ones specifically for major version bumps, maintaining a structured record of packages that require further evaluation before integration.