skills.rest
mizchi
mizchiCOMMUNITY
Explore all skills by this author →
Website𝕏@mizchiGitHub

upstream-fix-and-pin

Pin downstream dependencies to upstream git refs and track merge SHAs.

320|3|Updated Apr 24, 2026
Search Tags:#git#workflow#dependencies#pnpm#pull-request#upstream#pin
One-click install
npx skills add https://github.com/mizchi/skills --skill upstream-fix-and-pin
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: upstream-fix-and-pin
Source: https://github.com/mizchi/skills/tree/main/tooling/upstream-fix-and-pin
Command: npx skills add https://github.com/mizchi/skills --skill upstream-fix-and-pin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Downstream projects often stall when awaiting upstream fixes; this Skill provides a repeatable workflow to pin git refs, shelter via link:, and manage SHA transitions, including pnpm v10 build gating.

Core Features & Use Cases

  • Pinning git refs to downstream packages until upstream PRs merge.
  • Decision points for using link: to shelter downstream work.
  • SHA tracking and workflow gating for pnpm v10 builds.
  • Real-world scenario: ensuring a downstream project remains functional while an upstream library is fixed.

Quick Start

Pin downstream dependencies to the upstream commit SHA and validate the downstream build until upstream changes are merged.

Frequently Asked Questions about upstream-fix-and-pin

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I pin upstream git dependencies to keep a downstream project working while waiting for a PR to merge?▼

To pin upstream dependencies, you lock downstream packages to specific upstream commit SHAs, optionally shelter work using link:, and validate the downstream build until the upstream changes are merged.

What is the best workflow for managing git ref pinning and SHA transitions in pnpm?▼

Managing git ref pinning involves tracking branch HEAD to merge SHAs and enforcing pnpm v10 build script gating in downstream workflows, ensuring the project remains functional during upstream library fixes.

When should I use link: to shelter downstream work during an upstream fix?▼

You should use link: to shelter downstream work when a library owner needs to ship downstream projects while upstream PRs are reviewed, keeping downstream operations running without waiting for upstream merges.

Does pnpm v10 require build script gating when pinning upstream git refs?▼

Yes, pnpm v10 build script gating is enforced in downstream workflows when pinning upstream git refs, ensuring controlled execution and validation of builds during the upstream fix and SHA transition process.

How do I track merge SHAs after pinning a downstream dependency to an upstream branch HEAD?▼

Tracking merge SHAs requires monitoring the upstream branch HEAD and updating the pinned git refs in your downstream packages once the upstream PR is merged, validating the build at each transition.

Can I keep my downstream project operational if an upstream library has an unmerged fix?▼

Yes, you can keep a downstream project operational by pinning the upstream dependency to a specific git commit SHA and applying workflow gating, allowing downstream work to proceed while the upstream fix is reviewed.

Related Skills

Explore More Software Engineering Skills→
theslashdojotheslashdojo

turbo-config

Generate turbo.json files with workspace detection and remote cache settings for Turborepo monorepos.

Official
Intermediate
notquenotque
415

pr-cleanup

Automate safe local Git branch cleanup after PR merges.

Community
Advanced
snhrmsnhrm

package-updater

Automate package updates across npm, yarn, pnpm, and bun.

Community
Intermediate
craigtkhillcraigtkhill

install-dependencies

Enforce versionless dependency declarations across Python, Rust, and JavaScript projects.

Community
Intermediate