community-automations/dep-bumper

DevOps 與程式碼

PublicClaude 子代理

相依性升級工具

相依套件放到爛，直到安全警報逼得你在一大堆 breaking changes 裡手忙腳亂。這個工具讓套件持續更新，每次都是小幅度、好審查的步驟。

sonnet4 天GitHubRenovatenpmGitHub Actions
ClaudeClaude
ROI for
README.md

為什麼選擇此子代理

相依套件放到爛，直到安全警報逼得你在一大堆 breaking changes 裡手忙腳亂。這個工具讓套件持續更新，每次都是小幅度、好審查的步驟。

它會掃描 lockfile，把安全的 patch 和 minor 更新歸為一組，將有風險的 major 升級獨立出來。每個 pull request 都附帶風險標籤和變更紀錄，測試套件也會在你查看之前先跑完。通過測試、低風險的可以直接合併——保持更新不再是一季一次的大工程。

運作方式

    • Read

      Used at step 01 to kick off the pipeline.

    • Write

      Used at step 01 to kick off the pipeline.

    • WebFetch

      Used at step 01 to kick off the pipeline.

    • WebSearch

      Used at step 01 to kick off the pipeline.

輸出範例

json
// Sample output
// (generated when the pipeline finishes)

Given a repo's dependency state, return a plan of grouped update PRs, each with a risk label, changelog summary, and test result.

Unlock the rest

The full agent definition, install snippet, and starter task are gated for community members.

Members get the full `.md` agent file, the npm / pnpm install one-liners, a starter prompt that we've tuned against real runs, and the open-source repo when this automation ships there. One email, magic link, done.