medcore-dependabot-triage

Triage Dependabot pull requests by merging safe patch/minor changes and deferring majors.

2|3|Updated Apr 13, 2026

Search Tags:#pull requests #GitHub CLI #npmrc #dependabot #CI triage #peer dependency #ERESOLVE

Ready to run

npx skills add https://github.com/Globussoft-Technologies/medcore --skill medcore-dependabot-triage

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: medcore-dependabot-triage
Source: https://github.com/Globussoft-Technologies/medcore/tree/main/.claude/skills/medcore-dependabot-triage
Command: npx skills add https://github.com/Globussoft-Technologies/medcore --skill medcore-dependabot-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps you efficiently process a backlog of Dependabot PRs by merging safe patch/minor updates while correctly handling breaking majors and avoiding wasted time from stale CI failures and known dependency peer-resolution traps.

Core Features & Use Cases

Wave triage for dependabot queues: Automatically merges patch+minor PRs once CI is fresh, while leaving major bumps open for migration work.
Stale-CI detection: Distinguishes real failures from cached/stale job results by cross-checking runs for the current head SHA.
Workspace peer-dep unblocking: Applies a root .npmrc with legacy-peer-deps=true when Dependabot lockfile regeneration hits the known ERESOLVE peer-dependency mismatch.
Deterministic workflow discipline: Guides you to track PRs by headRefName (not PR number) to avoid confusion when Dependabot recreates PRs mid-flight.

Quick Start

Tell the AI to “look at the dependabot PRs in app/dependabot and merge the safe patch/minor ones after ensuring CI is fresh; leave majors deferred and apply the root legacy-peer-deps .npmrc if ERESOLVE appears.”

Frequently Asked Questions about medcore-dependabot-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I safely merge multiple dependabot pull requests without breaking the main branch?▼

To safely merge dependabot pull requests, triage them by merging patch and minor updates after verifying fresh CI on the current head SHA, while deferring breaking major bumps for manual migration.

What's the best way to fix ERESOLVE peer dependency errors during dependabot lockfile regeneration?▼

Fix ERESOLVE peer dependency errors during lockfile regeneration by applying a root .npmrc file with legacy-peer-deps=true to unblock installs caused by react/react-native workspace mismatches.

How do I distinguish real CI failures from stale job results when triaging dependabot PRs?▼

Distinguish real CI failures from stale job results by cross-checking CI runs against the current head SHA, ensuring you only act on fresh verification rather than cached or outdated build statuses.

Why do my dependabot PRs keep changing numbers and breaking my CI triage workflow?▼

Dependabot PRs change numbers when recreated mid-flight, so tracking them by headRefName instead of PR number prevents confusion and maintains a deterministic workflow discipline during CI triage.

Can I use GitHub CLI to automatically merge safe dependabot patch and minor updates?▼

Yes, you can use GitHub CLI to list open dependabot PRs, identify safe patch and minor candidates, rebase them onto current main, and merge them once CI verification passes for the head SHA.

When should I defer a dependabot pull request instead of merging it?▼

Defer a dependabot pull request when it contains a breaking major version bump, leaving it open for manual migration work rather than automatically merging it into your main branch.