update-deps

Automate dependency discovery, installation, and validation in pnpm monorepos.

21|4|Updated Sep 4, 2024
One-click install
npx skills add https://github.com/gaia-react/gaia --skill update-deps-gaia-react
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: update-deps
Source: https://github.com/gaia-react/gaia/tree/main/.claude/skills/update-deps
Command: npx skills add https://github.com/gaia-react/gaia --skill update-deps-gaia-react

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jq, and includes scripts (resource) components.

What problem does it solve?

This skill automates the tedious and error-prone process of keeping project dependencies up to date, ensuring that major version bumps, peer-dependency conflicts, and security advisories are handled safely without manual intervention.

Core Features & Use Cases

  • Intelligent Batching: Groups related packages (e.g., React, Storybook, Tailwind) to ensure they move as a single, compatible unit.
  • Automated Quality Gates: Runs typechecks, linting, and test suites automatically after every update to prevent regressions.
  • Override Auditing: Automatically detects and prunes obsolete pnpm overrides while maintaining security floors.

Quick Start

Ask the assistant to update dependencies to trigger the discovery, preview, and automated upgrade workflow for your project.

Frequently Asked Questions about update-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate pnpm dependency updates in a monorepo?

Automating pnpm dependency updates in a monorepo involves discovering outdated packages and resolving peer-dependency conflicts in batches. This skill handles the entire workflow, including installation and validation, to ensure complex version upgrades are applied safely across defined package groups.

What is the best way to handle peer-dependency conflicts during major version bumps?

Handling peer-dependency conflicts during major version bumps is managed through intelligent batching. Related packages like React and Tailwind are grouped to move as a single compatible unit, preventing version mismatches across your project.

How do quality gates prevent regressions when upgrading project dependencies?

Quality gates prevent regressions when upgrading project dependencies by automatically running typechecks, linting, and test suites after every update. This ensures production-grade stability by validating that new versions do not break existing code.

Does this dependency update tool require jq to audit pnpm overrides?

Yes, this dependency update tool requires jq to audit pnpm overrides. It automatically detects and prunes obsolete overrides while maintaining your established security floors for vulnerable packages.

When do I need to audit security floors for outdated npm packages?

You need to audit security floors for outdated npm packages when managing complex version upgrades and security advisories. This process prunes obsolete overrides and ensures vulnerable dependencies are upgraded to safe versions.