Skip to content
Back to skills

Dependency Upgrade

ASecurity

Plan and execute a dependency or framework upgrade with migration notes, isolated changes, full verification and a rollback path.

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 7, 2026
securitysecurity

Security analysis

A100/100

Scanned November 7, 2026

npx -y skills add Eliahhango/nullbyte-security --skill dependency-upgrade --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Dependency Upgrade?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Dependency Upgrade
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/eliahhango-dependency-upgrade/badge)](https://www.skillsdirectory.com/skills/eliahhango-dependency-upgrade)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: dependency-upgrade
description: Plan and execute a dependency or framework upgrade with migration notes, isolated changes, full verification and a rollback path.
---

# Dependency upgrade: move versions without breaking the runtime

- Read the release notes and migration guide before changing the lockfile. Identify breaking changes, dropped runtime support and security fixes.
- Upgrade one dependency family at a time. Keep application changes and lockfile churn in separate commits when possible.
- Use the project's package manager and lockfile exactly; do not mix managers or hand-edit generated files.
- Run the full test and build matrix, including type checks and the oldest supported runtime. Fix deprecations rather than suppressing them.
- Check transitive changes and peer constraints. A green install is not proof that the runtime path still works.
- For a security upgrade, identify the vulnerable range, the fixed version and whether the vulnerable path is actually reachable.
- Record the version delta, migration steps, test evidence and rollback plan.

---

_NullByte skill pack. Original guidance for this tool; no third-party skill text is bundled._

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.