skills.rest
AdamCaviness
AdamCavinessCOMMUNITY
Explore all skills by this author →
GitHub

update-deps

Automate CVE-aware dependency updates across multi-package repositories with scoped changes and test validation.

3|2|Updated Apr 10, 2026
Search Tags:#automation#testing#versioning#security#monorepo#update#dependency
One-click install
npx skills add https://github.com/AdamCaviness/agentic-toolkit --skill update-deps-adamcaviness
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: update-deps
Source: https://github.com/AdamCaviness/agentic-toolkit/tree/main/skills/update-deps
Command: npx skills add https://github.com/AdamCaviness/agentic-toolkit --skill update-deps-adamcaviness

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the end-to-end process of updating project dependencies in a safe, CVE-aware manner across monorepos. It coordinates bot PR checks, minor/patch updates, and major bump research to minimize risk while keeping dependencies current.

Core Features & Use Cases

  • Detects and classifies dependencies across manifests (package.json, pyproject.toml, etc.).
  • Applies safe minor/patch updates, while researching breaking changes for major bumps.
  • Orchestrates parallel research tasks and creates a dedicated branch for changes.
  • Validates updates with tests and provides a structured change plan for major bumps.

Quick Start

Type /update-deps to start the CVE-aware dependency upgrade process.

Frequently Asked Questions about update-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate safe dependency updates across a monorepo?▼

Automating safe dependency updates across a monorepo requires coordinating bot PR checks, applying scoped minor/patch updates, and researching breaking changes for major bumps to minimize risk while keeping dependencies current.

What is the best way to research breaking changes for major dependency bumps?▼

Researching breaking changes for major dependency bumps is handled by orchestrating parallel research tasks that validate updates with tests and generate a structured change plan before applying major version increases.

Can I apply CVE-aware dependency updates to specific scopes like frontend or backend?▼

CVE-aware dependency updates can be applied to specific scopes like frontend, backend, infra, or all packages, ensuring targeted security patches and version changes are validated through a deterministic workflow.

How do I handle lockfile conflicts when updating multiple package manifests?▼

Handling lockfile conflicts during multi-package updates involves tuning lockfile handling and branching into a deterministic workflow with safety checks, ensuring coordinated updates across manifests like package.json or pyproject.toml.

Does automated dependency updating work with both npm and Python package manifests?▼

Automated dependency updating works across multiple manifest types, detecting and classifying dependencies in files like package.json and pyproject.toml to coordinate minor, patch, and major version bumps safely.

Related Skills

Explore More Software Engineering Skills→
thatrebeccaraethatrebeccarae
97

dep-audit

Scan Node.js, Python, Rust, and Go manifests for outdated packages, advisories, and license issues.

Community
Advanced
GS-PersonalGS-Personal

ship

Automate feature branch merges, tests, version bumps, changelog updates, and PR creation.

Official
Advanced
transilienceaitransilienceai
462

cve-testing

Coordinate CVE vulnerability testing across identified technology stacks and APIs.

Official
Basic
makeupmakeup
47

update-minor-deps

Batch update non-breaking devDependencies in JavaScript monorepos with npm.

Official
Advanced