Dependency Upgrader

About

This skill coordinates the entire lifecycle of upgrading project dependencies, supporting ecosystem-specific tools for Node.js, Python, and .NET. It prioritizes project stability by performing pre-flight git checks, auditing for security vulnerabilities, enforcing a 14-day minimum release age to avoid supply-chain attacks, and automatically rolling back changes if the post-upgrade build fails. It is an essential tool for maintaining production-ready codebases, ensuring they stay secure and up-to-date with minimal manual intervention while providing detailed reports on all changes.

Key Features

• Detailed reporting of successful upgrades, breaking changes, and build status
• Automatic build verification and rollback on failure to ensure project stability
• Supply chain protection via configurable 14-day minimum release age checks
• Multi-stack support for npm, yarn, pnpm, NuGet, pip, Poetry, and Pipenv
• Automated security audits that block upgrades with critical vulnerabilities
• 38 GitHub stars

Use Cases

• Performing routine maintenance on large polyglot monorepos with multiple package managers
• Upgrading project dependencies to major versions while automatically verifying build integrity
• Securing a project by identifying and patching critical dependency vulnerabilities