Description
dependency-upgrade is an agent skill from the wshobson/agents collection for managing major version upgrades of the dependencies in a project. It starts with a review of semantic versioning, the MAJOR.MINOR.PATCH scheme that tells you whether an upgrade is expected to break things, and then covers compatibility analysis to find what a new version changes. The skill describes staged upgrade strategies that move a project in controlled steps rather than in one jump, and it covers comprehensive testing, including compatibility matrices where several dependencies must work together. It applies when upgrading framework versions, updating dependencies with known security vulnerabilities, modernizing legacy dependencies, resolving dependency conflicts, planning an incremental upgrade path across several major versions, and automating routine dependency updates. The skill is meant to keep upgrades safe and reviewable, so that a major change is tested and rolled out deliberately instead of being merged blind. It works on the project's own dependency manifests and test suite, so the agent needs access to those files to be useful. It is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 10.9K installs and passing results from three security audits at the time of the scan.…
Highlights
- Semantic versioning review
- Compatibility analysis for major upgrades
- Staged upgrade strategies
- Compatibility matrix testing
- Incremental upgrade paths
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate dependency-upgrade.
People also visit
dependency-upgrade FAQ
What does this skill help with?
Planning and carrying out major dependency and framework upgrades in stages, with compatibility checks and testing.
What does semantic versioning have to do with it?
The MAJOR.MINOR.PATCH scheme tells you when a version change is expected to break compatibility, which the skill uses to plan the upgrade.
Can it handle security fixes?
Yes. Updating security-vulnerable dependencies is one of the situations the skill covers.
Does it run tests for me?
The skill includes testing approaches, including compatibility matrices. It works with the project's own test suite.
How do I install it?
Run npx skills add https://github.com/wshobson/agents --skill dependency-upgrade.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best dependency-upgrade alternatives?
Popular alternatives to dependency-upgrade include changelog-automation, task-coordination-strategies and uv-package-manager. See all dependency-upgrade alternatives