Agent capability

dep-upgrader

Maintain dependencies, security, and quality across polyglot local workspaces containing Next.js, Node.js, pnpm, .NET, NuGet, and Avalonia. Use when an agent must detect projects, migrate npm workspaces to pnpm, enforce a minimum seven-day release age for Node dependencies, update packages, run audits, validate builds and tests, consolidate package versions, analyze configuration or UI assets, configure Renovate or Changesets, or orchestrate safe backups and rollbacks.

Bash, Node.js 20+, pnpm, and an optional .NET SDK. External scanners such as OSV-Scanner and Trivy are used only when already available; local tool installation requires explicit authorization. 11 files 44,542 bytes

Runtime provisioning

Provision this capability

The provisioning flow resolves the versioned manifest, verifies every SHA-256 digest, and applies the package atomically.

Shared Agent Skills

User scope: ~/.agents/skills/dep-upgrader

curl -fsSLo /tmp/mm-skills-install.sh __MM_RUNTIME_ORIGIN__/install.sh && bash /tmp/mm-skills-install.sh dep-upgrader --client agents --scope user --registry __MM_RUNTIME_ORIGIN__

Codex

User scope: ~/.agents/skills/dep-upgrader

curl -fsSLo /tmp/mm-skills-install.sh __MM_RUNTIME_ORIGIN__/install.sh && bash /tmp/mm-skills-install.sh dep-upgrader --client codex --scope user --registry __MM_RUNTIME_ORIGIN__

OpenCode

User scope: ~/.config/opencode/skills/dep-upgrader

curl -fsSLo /tmp/mm-skills-install.sh __MM_RUNTIME_ORIGIN__/install.sh && bash /tmp/mm-skills-install.sh dep-upgrader --client opencode --scope user --registry __MM_RUNTIME_ORIGIN__

Antigravity

User scope: ~/.gemini/config/skills/dep-upgrader

curl -fsSLo /tmp/mm-skills-install.sh __MM_RUNTIME_ORIGIN__/install.sh && bash /tmp/mm-skills-install.sh dep-upgrader --client antigravity --scope user --registry __MM_RUNTIME_ORIGIN__
Windows PowerShell
$installer = Join-Path $env:TEMP 'mm-skills-install.ps1'; Invoke-WebRequest '__MM_RUNTIME_ORIGIN__/install.ps1' -OutFile $installer; & $installer -Skill 'dep-upgrader' -Client 'agents' -Scope 'user' -Registry '__MM_RUNTIME_ORIGIN__'

Artifact integrity

Versioned package contents

Inspect manifest
PathBytesSHA-256
README.md 2,058 963df4e16e1854ec…
references/pipeline.md 902 787cddc79d666ec3…
references/tool-matrix.md 1,732 2326a828dadb29b5…
scripts/dep-upgrader.sh 4,782 f5a932b1b04635a0…
scripts/lib/common.sh 3,396 7957ae162f42005c…
scripts/lib/discovery.sh 2,760 6dd98823db1daef0…
scripts/lib/dotnet.sh 1,706 913f7e3095f3c082…
scripts/lib/modules.sh 11,080 bc7de3340a4a9fe4…
scripts/lib/node.sh 4,700 e725a155cc174743…
scripts/smoke-test.sh 2,984 7cedb8cc9b8045c1…
SKILL.md 8,442 6f4b5e00754f2501…