skills/denvig-upgrade-npm-dependencies/SKILL.md
Use the denvig cli to upgrade your npm dependencies in the current project.
npx skillsauth add marcqualie/agent-skills denvig-upgrade-npm-dependenciesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
You are an expert software engineer specialized in managing and upgrading npm dependencies in TypeScript projects. Denvig is a specialised CLI tool that can assist with identifying outdated dependencies.
The user has asked you to upgrade: $ARGUMENTS
Your task is to upgrade the npm dependencies in this project according to the following guidelines:
denvig outdated --semver patch --ecosystem npm and denvig outdated --semver minor --ecosystem npm.denvig outdated command.npm view {{package}} repository.url.npm view {{package}} versions or similar commands that list all versions since you already have that information from the outdated command.pnpm install command to install the updated packages.pnpm upgrade or npm update commands.One you have completed the above steps for each package you should summarize all the changes in the following format:
Update {{count}} (patch|minor) dependenciesUpgrade {{package}} from {{old version}} to {{new version}}If the current git state is not clean then stash the current state, alerting the user to this at the end of the process.
If the current branch is main then check the git remote origin to make the following choice:
origin is a github.com remote then create a new branch called denvig/upgrade-{{count}}-{{type}}-packages.origin is any other provider then use your AskUserQuestion tool to ask the user if they want to create a new branch or continue on main.Create a git commit with the below summary format if there is at least one dependency upgraded. Examples are provided below for patch and minor upgrades.
If the branch is not main, then a GitHub PR should be created using gh pr create --draft --assignee @me to create a draft pull request with with the title as the git commit message and the body as the summary of changes.
Open the Pull Request in the browser using gh pr view {id} -w.
{{git_commit_message}}
## Package Updates
- {{package}}: [{{old_version}} -> {{new_version}}]({{link_to_changelog_or_diff}})
- {{summary_of_changes_from_changelog}}
## Code Changes
{{details_of_code_modifications_made}}
## Checks
{{list_of_checks_performed_after_upgrade}}
Update 2 patch dependencies
## Package Updates
- react: [19.1.0 -> 19.1.1](https://github.com/facebook/react/releases/tag/v19.1.1)
- Fixed Owner Stacks to work with ES2015 function.name semantics
- zod: [4.1.4 -> 4.1.7](https://github.com/colinhacks/zod/compare/v4.1.4...v4.1.7)
- Update z.function() type to support array input (#5170)
- Updated docs
## Code Changes
All patch versions with no breaking changes or code modifications required.
## Checks
- ✅ Checked changelogs for breaking changes
- ✅ Lint passes after upgrade
- ✅ All tests pass after upgrade
- ✅ No code modifications were necessary
Update 2 minor dependencies
## Package Updates
- typescript: [5.8.2 -> 5.9.2](https://github.com/microsoft/TypeScript/compare/v5.8.2...v5.9.2)
- Release announcement: https://devblogs.microsoft.com/typescript/announcing-typescript-5-9/
- Support for `--module node20`
- Support for `import defer`
- biome: [2.1.0 -> 2.2.0](https://github.com/biomejs/biome/compare/%40biomejs/biome%402.1.0...%40biomejs/biome%402.2.0)
- The noRestrictedImports rule has been enhanced with a new patterns option
- Improved useExhaustiveDependencies to better handle complex hook calls
## Code Changes
- Ran `biome migrate` to apply necessary code modifications for biome 2.2.0
- Removed unused deps from useEffect hooks that don't actually require them
## Notes
- Some `uesEffect` hooks have ignore rules which can be removed with the new biome version.
## Checks
- ✅ Checked changelogs for breaking changes
- ✅ Lint passes after upgrade
- ✅ All tests pass after upgrade
- ✅ Code modifications applied where necessary
tools
Use the denvig cli to upgrade your npm dependencies with security issues in the current project.
tools
Create a Pull Request using gh CLI
tools
Summarise then commit the changes in the current session.
tools
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.