update-deps

Automating npm dependency updates involves identifying packages, checking versions, running security audits, and validating changes through build, lint, and test scripts before pushing. This skill handles the entire process automatically, creating an isolated Git worktree to test updates safely before generating a pull request with detailed validation results.

Yes, you can run npm audit and automated validation together before creating a pull request. The process executes build, lint, and test scripts to ensure updated packages do not break functionality, then generates a pull request containing the security audit and validation outcomes.

Updating version references in documentation during major npm package bumps requires identifying specific files needing changes. This skill automatically detects major version updates and notes required documentation updates within the generated pull request to keep project guides accurate.

The best way to isolate npm package updates is by creating a dedicated Git worktree. This skill establishes a new worktree to perform package updates, run security audits, and execute validation scripts independently before pushing changes and submitting a pull request.

You do not need to manually fix vulnerabilities after updating all npm packages. The automated process includes an npm audit step to identify and address security vulnerabilities, documenting the security posture within the pull request details.

You can update specific npm packages instead of all dependencies by specifying package names or using glob patterns. The skill supports targeted updates alongside full repository updates, applying the same automated validation and pull request generation workflow.