dependency-upgrade

This skill provides a comprehensive framework for managing complex software dependency upgrades, particularly when transitioning between major framework versions. It is designed for software engineers and developers who need to modernize legacy projects, resolve dependency conflicts, or maintain security postures by patching vulnerable libraries. The skill emphasizes a non-destructive approach, leveraging semantic versioning analysis, dependency tree audits, and incremental rollout strategies to minimize regression risks in production environments.

• Perform deep dependency audits using standard tooling like npm audit, yarn outdated, and npm-check-updates to identify breaking changes.

• Construct and validate compatibility matrices to ensure inter-package consistency across major version leaps.

• Implement staged upgrade plans that prioritize critical infrastructure components, such as TypeScript and core frameworks (e.g., React), before auxiliary libraries.

• Automate the identification and application of code migrations using codemods and custom migration scripts for repetitive API surface changes.

• Integrate rigorous testing protocols, including unit, integration, visual regression, and end-to-end (E2E) tests with frameworks like Cypress.

• Configure automated maintenance bots like Renovate or Dependabot to manage minor and patch updates while maintaining manual gatekeeping for major version shifts.

• The skill expects access to repository files including package.json, lockfiles, and existing test suites.

• Users should provide clear scope (e.g., 'upgrade React 16 to 18') to allow the agent to generate a tailored UPGRADE_PLAN.md.

• Outputs typically include a sequenced plan of shell commands, modified source code via migrations, and updated configuration manifests.

• It is constrained by the existing test coverage; users should ensure a stable baseline before execution.

• Always perform updates in isolated branches and verify compliance with CHANGELOG.md and MIGRATION.md documentation for every major version change.