update-deps
Keep your project dependencies current without the manual overhead. This skill orchestrates updates across your codebase while running security checks and validating changes through your CI pipeline, ensuring stability before merging.
update-deps orchestrates dependency updates across your codebase while running automated security checks and validating changes through your CI pipeline before merging. It ensures stability by catching issues in your real CI environment rather than discovering them after merge, eliminating manual overhead from the update process.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-07-27
update-deps orchestrates dependency updates across your codebase while running automated security checks and validating changes through your CI pipeline before merging. It ensures stability by catching issues in your real CI environment rather than discovering them after merge, eliminating manual overhead from the update process.
Use it when
- Yes.
- update-deps detects and uses the correct package manager automatically for any project, supporting npm, yarn, pip, poetry, bundler, cargo.
Verify before relying
Read SKILL.md below before installing (1 file). Open directory: indexed for reading, not audited.
Install
joshukraine/dotfiles/update-deps · repository language: Shell
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How does update-deps help me update dependencies safely?
update-deps orchestrates dependency updates across your codebase while running automated security checks and validating changes through your CI pipeline before merging. It ensures stability by catching issues in your real CI environment rather than discovering them after merge, eliminating manual overhead from the update process.
Can update-deps reconcile multiple Dependabot PRs into one?
Yes. update-deps is designed to reconcile multiple Dependabot PRs into a single unified dependency update, streamlining your workflow when Dependabot generates separate pull requests for different dependency groups or security patches.
What package managers does update-deps support?
update-deps detects and uses the correct package manager automatically for any project, supporting npm, yarn, pip, poetry, bundler, cargo, go modules, and other major package managers. This package manager agnostic approach means you don't need to configure it differently for each project type.
Does update-deps validate dependency changes on CI before merging?
Absolutely. update-deps validates dependency changes against your real CI environment before merging, running security audits and test frameworks specific to your project. This ensures that updates pass your actual CI validation pipeline rather than just passing local checks.
How does update-deps handle major version updates differently from minor or patch updates?
update-deps isolates and safely handles major version updates separately from patch and minor bumps, allowing you to manage breaking changes with different review and testing criteria. This separation reduces risk by preventing major version changes from being bundled with routine maintenance updates.
Can update-deps work with different testing frameworks and languages?
Yes. update-deps is framework agnostic and automatically detects the appropriate test framework for your project, whether you're using Jest, pytest, RSpec, or any other testing tool. Combined with its package manager detection, this makes update-deps a unified dependency PR generation tool that adapts to your specific tech stack.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
Update Dependencies
Update project dependencies safely: reconcile open Dependabot PRs into one unified change, run the project's security audit, validate boot-affecting changes against the real CI environment, and open a single PR — instead of stopping at local commits.
This skill is framework-agnostic. It detects the project's package manager, test/lint commands, audit suite, and CI workflow rather than assuming a stack.
Command Options
--dry-run: Show what would be updated without making changes--major: Include major version updates (default: minor/patch only)--package <name>: Update specific package only--skip-tests: Skip running tests between updates
Workflow at a glance
Detect → Reconcile Dependabot → Update → Audit → Validate on real CI → Open PR → Verify auto-close
Each stage feeds the next. Don't skip the audit or the real-CI validation for boot-affecting changes — those are the two stages that catch what local tests can't.
Your
(truncated - see the full file via the links below)
File tree — 1 file
claude/.claude/skills/update-deps/SKILL.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Safely update project dependencies with automated security checks and CI validation”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
This skill automates dependency management across multiple package ecosystems, helping you keep npm, pip, cargo, and maven packages current while minimizing breaking changes. It integrates with AI agents to analyze version compatibility, flag security updates, and execute safe upgrades across your entire development stack.
dependency-updater automates the process of keeping your project dependencies current while maintaining stability and security. This skill integrates with AI coding agents to intelligently manage updates, applying protective measures to prevent breaking changes and ensure your codebase remains compatible.
This skill automates the process of updating your project's dependencies while maintaining stability and compatibility. It handles multiple programming languages and frameworks, reducing the manual work required to keep packages current and secure.
This skill helps you systematically review and remediate security vulnerabilities within your project's dependency tree. It integrates with Claude Code to scan for known issues, assess their impact, and recommend or apply fixes automatically.
Worktree Pr orchestrates isolated feature development by creating dedicated git worktrees where multiple subagents collaborate on the same codebase before submitting to multi-agent review. The skill handles worktree creation, PR generation with Claude and Codex reviews, merge coordination, and cleanup—enabling safer, more reversible changes with built-in rollback.
This skill automates the organization and prioritization of Dependabot security notifications, helping teams quickly identify and address the most critical vulnerabilities. By intelligently categorizing alerts based on severity and impact, it reduces manual review overhead and accelerates your security response cycle.
More skills Update Node Deps (unlicensed) · release-bump (MIT) · verify (MIT) · review-dependencies (MIT)