Node upgrade
A sophisticated tool designed to bring quality and security to the world of AI Agent Skills
npx -y skills add yu-iskw/skill-inspector --skill node-upgradeAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Safely upgrade Node.js dependencies in pnpm workspaces. Use when asked to "upgrade dependencies", "update packages", "check for updates", or fix version mismatches.
SKILL.md
2.6 KB, as published. Nobody here has run it
Safe Node.js Dependency Upgrade
This skill provides a structured process for safely upgrading Node.js dependencies, ensuring project stability through pre-upgrade health checks and post-upgrade validation.
1. Preparation & Health Check
Before making any changes, verify the current state of the project:
- Baseline Health Check:
- Run an audit:
pnpm audit. - Run the test suite:
pnpm test. - Constraint: If the baseline tests fail, resolve those issues before proceeding with upgrades.
- Run an audit:
- Backup:
- Backup
package.jsonand the lockfile:cp pnpm-lock.yaml pnpm-lock.yaml.bak.
- Backup
2. Upgrade Execution
Choose the appropriate upgrade path based on the user's request. Refer to ../common-references/pnpm-commands.md for pnpm-specific commands.
Targeted Upgrade (Recommended)
Use this when the user specifies a package or a small set of packages.
- Upgrade: Run the targeted upgrade command (e.g.,
pnpm update <package>). - Verify: Check
package.jsonto ensure the version has been updated.
Full Upgrade (Maintenance)
Use this for general dependency maintenance.
- Upgrade: Run the full upgrade command (e.g.,
pnpm update). - Check for Breaking Changes: Review the lockfile changes and check for major version bumps.
3. Validation & Verification
After the upgrade, ensure the project remains stable by delegating to the project verifier:
- Invoke Verifier: Use the
verifiersubagent (../../agents/verifier.md) to run the full build, lint, and test cycle. - Handle Failure: If the
verifierreports persistent issues it cannot fix, analyze the breaking changes and apply manual fixes or roll back. - Final Audit: Once the verifier passes, run
pnpm auditagain to ensure no new vulnerabilities were introduced.
4. Finalization
- Commit: Create a commit with the updated
package.jsonand lockfile.- Message Suggestion:
chore(deps): upgrade dependencies
- Message Suggestion:
- Cleanup: Remove backup files:
rm *.bak.
Rollback Plan
If validation fails and cannot be easily fixed:
- Restore:
mv package.json.bak package.jsonandmv <lockfile>.bak <lockfile>. - Re-install: Run
pnpm installto restore the environment. - Report: Notify the user of the failure and the reasons (e.g., specific breaking changes).