upgrade-deps

Automate dependency upgrades for JavaScript/TypeScript projects with package.json and lockfiles.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/dungle-scrubs/agent-config --skill upgrade-deps
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: upgrade-deps
Source: https://github.com/dungle-scrubs/agent-config/tree/main/stow/shared/skills/upgrade-deps
Command: npx skills add https://github.com/dungle-scrubs/agent-config --skill upgrade-deps

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the tedious process of keeping JavaScript/TypeScript projects' dependencies up to date across npm, pnpm, and yarn, including coordinated upgrades for related packages.

Core Features & Use Cases

  • Groupwise updates: automatically apply patch and minor updates and align related packages (e.g., Storybook, React, ESLint) to compatible versions.
  • Interactive major upgrades: prompt for each breaking change and provide migration guidance when needed.
  • Audit & reporting: generate a concise summary of what was upgraded, what was skipped, and any actions required.

Quick Start

Run the upgrade-deps skill from a project root to analyze and upgrade dependencies. It will detect your package manager, fetch outdated packages, and guide you through major upgrades if requested.

Frequently Asked Questions about upgrade-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate npm dependency upgrades for related packages?

Automating npm dependency upgrades involves detecting outdated packages and grouping related updates, such as Storybook or ESLint, to align them to compatible versions. This tool applies patch and minor updates automatically while guiding interactive major version upgrades.

Can I upgrade pnpm and yarn dependencies in groups instead of individually?

Yes, you can upgrade pnpm and yarn dependencies in groups. The process detects your package manager from the lockfile, fetches outdated packages, and groups related dependencies together for coordinated version updates.

What is the best way to handle breaking changes during a major version upgrade?

The best way to handle breaking changes during a major version upgrade is through interactive prompts. This approach pauses for each major semver change, provides migration guidance, and generates a report of skipped packages and required actions.

Do I need a lockfile to analyze and upgrade outdated JavaScript packages?

Yes, you need a supported lockfile and a package.json to analyze and upgrade outdated JavaScript packages. The tool uses the lockfile to detect your specific package manager before fetching and applying the dependency updates.

How does semver grouping work when updating TypeScript project dependencies?

Semver grouping works by automatically applying patch and minor updates without prompts, while isolating major version changes. It aligns related TypeScript project dependencies to compatible versions and prompts for confirmation on breaking major upgrades.