fleet-updating

Coordinate fleet dependency updates with pnpm and validate lockstep manifests.

125|42|Updated May 19, 2025
One-click install
npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-updating
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fleet-updating
Source: https://github.com/SocketDev/socket-mcp/tree/main/.agents/skills/fleet-updating
Command: npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-updating

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Coordinated maintenance of Socket fleet repositories by performing updates, validating lockstep manifests when present, bumping submodules, and auditing GitHub settings to keep ecosystems healthy and release-ready.

Core Features & Use Cases

  • Orchestrates npm/pnpm-based fleet updates with a parallel discovery sweep and per-category drift application.
  • Validates lockstep manifests when present, updates submodules, pins workflow SHAs, resolves open Dependabot alerts, refreshes coverage in READMEs, and audits GH Actions settings drift.
  • Use cases include weekly maintenance, security patch rollouts, and pre-release release prep.

Quick Start

Initiate a fleet update across a repository to update dependencies, validate lockstep, and refresh workflow and readme health.

Frequently Asked Questions about fleet-updating

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate pnpm dependency updates across multiple repositories?

Automate pnpm dependency updates across multiple repositories by running a parallel discovery sweep, applying per-category drift handling, and enforcing lockstep manifest validation. This ensures your entire fleet stays healthy and release-ready with atomic conventional commits.

What is lockstep validation in a monorepo fleet update?

Lockstep validation checks that dependency versions remain synchronized across repositories during a fleet update. It ensures manifests stay aligned when applying pnpm updates, bumping submodules, and pinning workflow SHAs across your umbrella fleet.

Can I resolve Dependabot alerts and audit GitHub Actions settings during a fleet update?

Yes, you can resolve open Dependabot alerts and audit GitHub Actions settings drift during a fleet update. The process pins workflow SHAs, checks environment configurations, and refreshes coverage in READMEs to maintain repository health.

How do I prepare a repository fleet for a pre-release security patch rollout?

Prepare a repository fleet for pre-release security patch rollouts by running pnpm update, validating lockstep manifests, bumping submodules, and applying atomic conventional commits. Per-item pipelines handle drift while enforcing environment validation.

Does fleet updating work with weekly maintenance schedules for GitHub Actions workflows?

Fleet updating works for weekly maintenance schedules by orchestrating npm and pnpm updates across GitHub Actions workflows. It pins workflow SHAs, audits GH Actions settings drift, and refreshes README coverage to keep ecosystems healthy.

What are the limitations of coordinating umbrella fleet updates with pnpm?

Coordinating umbrella fleet updates with pnpm requires environment validation and lockstep manifests to function correctly. Limitations arise when per-category drift handling cannot resolve conflicts automatically, requiring manual intervention for atomic commits.