AgentStack
SKILL verified MIT Self-run

Bump Deps

skill-paulrberg-dot-agents-bump-deps · by PaulRBerg

Use for dependency updates: bump npm/pnpm/yarn/bun packages, check outdated, or run taze.

No reviews yet
0 installs
16 views
0.0% view→install

Install

$ agentstack add skill-paulrberg-dot-agents-bump-deps

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Are you the author of Bump Deps? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Bump Dependencies

Use Taze to build one structured update plan, apply compatible ranged updates, and make major-version decisions as a batch.

Workflow

  1. Resolve the skill directory and run the helper from the target repository:

``sh bash /scripts/run-taze.sh --plan [--include package-a,package-b] ``

The JSON plan classifies every discovered update as apply, review-major, review, or skip-fixed. The helper detects monorepos, includes locked versions during scans, and mirrors Bun minimum-release-age settings. If the repository uses package-manager age gates or Bun catalogs, read [references/conditional-workflows.md](references/conditional-workflows.md) for that active branch only.

  1. If --dry-run was requested, present the plan and counts, then stop without changing manifests or lockfiles.
  1. Select every ranged minor/patch update marked apply. Never auto-approve a major package by name. Present all

review-major and unknown updates in one decision batch with current version, target version, package role when discoverable, and relevant migration/release notes. Apply only the majors the user selects.

  1. If nothing is selected, report the no-op and stop. Otherwise write all selected updates in one command:

``sh bash /scripts/run-taze.sh --write --include package-a,package-b ``

  1. Update matching root Bun catalog entries when present, preserving their existing range prefixes. Then run ni so the

repository's package manager updates its lockfile.

  1. Inspect the manifest and lockfile diff. Run the narrowest package-manager or repository checks that exercise updated

dependencies, with extra attention to approved major migrations.

Invariants

  • Fixed versions and non-semver protocols remain unchanged unless the user explicitly asks otherwise.
  • Package arguments constrain both scan and write phases.
  • The same maturity-period policy applies to scan and write.
  • Do not infer compatibility from SemVer alone when repository evidence, peer ranges, or release notes indicate

otherwise.

Completion requires a reviewed plan, one manifest write for the selected set, a regenerated lockfile, and validation evidence; dry-run completion requires the structured plan and zero writes.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.