update-deps

Automate CVE-aware dependency updates across multi-package repositories with scoped changes and test validation.

3|2|Updated Apr 10, 2026

Search Tags:#automation #testing #versioning #security #monorepo #update #dependency

Ready to run

npx skills add https://github.com/AdamCaviness/agentic-toolkit --skill update-deps-adamcaviness

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: update-deps
Source: https://github.com/AdamCaviness/agentic-toolkit/tree/main/skills/update-deps
Command: npx skills add https://github.com/AdamCaviness/agentic-toolkit --skill update-deps-adamcaviness

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the end-to-end process of updating project dependencies in a safe, CVE-aware manner across monorepos. It coordinates bot PR checks, minor/patch updates, and major bump research to minimize risk while keeping dependencies current.

Core Features & Use Cases

Detects and classifies dependencies across manifests (package.json, pyproject.toml, etc.).
Applies safe minor/patch updates, while researching breaking changes for major bumps.
Orchestrates parallel research tasks and creates a dedicated branch for changes.
Validates updates with tests and provides a structured change plan for major bumps.

Quick Start

Type /update-deps to start the CVE-aware dependency upgrade process.

Frequently Asked Questions about update-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate safe dependency updates across a monorepo?▼

Automating safe dependency updates across a monorepo requires coordinating bot PR checks, applying scoped minor/patch updates, and researching breaking changes for major bumps to minimize risk while keeping dependencies current.

What is the best way to research breaking changes for major dependency bumps?▼

Researching breaking changes for major dependency bumps is handled by orchestrating parallel research tasks that validate updates with tests and generate a structured change plan before applying major version increases.

Can I apply CVE-aware dependency updates to specific scopes like frontend or backend?▼

CVE-aware dependency updates can be applied to specific scopes like frontend, backend, infra, or all packages, ensuring targeted security patches and version changes are validated through a deterministic workflow.

How do I handle lockfile conflicts when updating multiple package manifests?▼

Handling lockfile conflicts during multi-package updates involves tuning lockfile handling and branching into a deterministic workflow with safety checks, ensuring coordinated updates across manifests like package.json or pyproject.toml.

Does automated dependency updating work with both npm and Python package manifests?▼

Automated dependency updating works across multiple manifest types, detecting and classifying dependencies in files like package.json and pyproject.toml to coordinate minor, patch, and major version bumps safely.