update-deps
Keep your project dependencies current without the manual overhead. This skill orchestrates updates across your codebase while running security checks and validating changes through your CI pipeline, ensuring stability before merging.
update-deps orchestrates dependency updates across your codebase while running automated security checks and validating changes through your CI pipeline before merging. It ensures stability by catching issues in your real CI environment rather than discovering them after merge, eliminating manual overhead from the update process.
AI-generated summary based on this skill's SKILL.md
Install
joshukraine/dotfiles/update-deps · repository language: Shell
git clone https://github.com/joshukraine/dotfiles
cp -r dotfiles/claude/.claude/skills/update-deps ~/.claude/skills/update-depsFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How does update-deps help me update dependencies safely?
update-deps orchestrates dependency updates across your codebase while running automated security checks and validating changes through your CI pipeline before merging. It ensures stability by catching issues in your real CI environment rather than discovering them after merge, eliminating manual overhead from the update process.
Can update-deps reconcile multiple Dependabot PRs into one?
Yes. update-deps is designed to reconcile multiple Dependabot PRs into a single unified dependency update, streamlining your workflow when Dependabot generates separate pull requests for different dependency groups or security patches.
What package managers does update-deps support?
update-deps detects and uses the correct package manager automatically for any project, supporting npm, yarn, pip, poetry, bundler, cargo, go modules, and other major package managers. This package manager agnostic approach means you don't need to configure it differently for each project type.
Does update-deps validate dependency changes on CI before merging?
Absolutely. update-deps validates dependency changes against your real CI environment before merging, running security audits and test frameworks specific to your project. This ensures that updates pass your actual CI validation pipeline rather than just passing local checks.
How does update-deps handle major version updates differently from minor or patch updates?
update-deps isolates and safely handles major version updates separately from patch and minor bumps, allowing you to manage breaking changes with different review and testing criteria. This separation reduces risk by preventing major version changes from being bundled with routine maintenance updates.
Can update-deps work with different testing frameworks and languages?
Yes. update-deps is framework agnostic and automatically detects the appropriate test framework for your project, whether you're using Jest, pytest, RSpec, or any other testing tool. Combined with its package manager detection, this makes update-deps a unified dependency PR generation tool that adapts to your specific tech stack.
SKILL.md
rendered from the published skill — quoted content, verbatim
Update Dependencies
Update project dependencies safely: reconcile open Dependabot PRs into one unified change, run the project's security audit, validate boot-affecting changes against the real CI environment, and open a single PR — instead of stopping at local commits.
This skill is framework-agnostic. It detects the project's package manager, test/lint commands, audit suite, and CI workflow rather than assuming a stack.
Command Options
--dry-run: Show what would be updated without making changes--major: Include major version updates (default: minor/patch only)--package <name>: Update specific package only--skip-tests: Skip running tests between updates
Workflow at a glance
Detect → Reconcile Dependabot → Update → Audit → Validate on real CI → Open PR → Verify auto-close
Each stage feeds the next. Don't skip the audit or the real-CI validation for boot-affecting changes — those are the two stages that catch what local tests can't.
Your
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 1 file
claude/.claude/skills/update-deps/SKILL.md