community-automations/dep-bumper

DevOps & Code

PublicClaude subagent

Dependency Bumper

Dependencies rot until a security alert forces a scramble through a wall of breaking changes. This bumper keeps them current in small, reviewable steps.

sonnet4 daysGitHubRenovatenpmGitHub Actions
ClaudeClaude
ROI for
README.md

Why this subagent

Dependencies rot until a security alert forces a scramble through a wall of breaking changes. This bumper keeps them current in small, reviewable steps.

It scans your lockfiles, groups safe patch and minor updates together, and isolates the risky major bumps. Each pull request carries a risk label and a changelog, and the test suite runs before you look. The green, low-risk ones are ready to merge, so staying current stops being a quarterly project.

How it runs

    • Read

      Used at step 01 to kick off the pipeline.

    • Write

      Used at step 01 to kick off the pipeline.

    • WebFetch

      Used at step 01 to kick off the pipeline.

    • WebSearch

      Used at step 01 to kick off the pipeline.

Sample output

json
// Sample output
// (generated when the pipeline finishes)

Given a repo's dependency state, return a plan of grouped update PRs, each with a risk label, changelog summary, and test result.

Unlock the rest

The full agent definition, install snippet, and starter task are gated for community members.

Members get the full `.md` agent file, the npm / pnpm install one-liners, a starter prompt that we've tuned against real runs, and the open-source repo when this automation ships there. One email, magic link, done.