Skip to content
Back to skills

Update Deps

ASecurity

Update Python dependencies or pre-commit hooks while preserving the project's pin and configuration style.

  • 12 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 22, 2026
developmentpythonbashgit

Security analysis

A100/100

Scanned September 22, 2026

npx -y skills add reidemeister94/development-skills --skill update-deps --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Update Deps?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Update Deps
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/reidemeister94-update-deps/badge)](https://www.skillsdirectory.com/skills/reidemeister94-update-deps)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: update-deps
description: "Update Python dependencies or pre-commit hooks while preserving the project's pin and configuration style."
user-invocable: true
---

# Update dependencies

For `.pre-commit-config.yaml` or hooks, run `pre-commit autoupdate`, confirm the revision-only diff, then run all configured hooks.
If the command is unavailable, resolve official Git tags while preserving `v` prefixes and quoting.

Otherwise, update Python dependencies to current PyPI releases while preserving each pin style.
Use `$ARGUMENTS` or detect the stack:

- `[project].dependencies` plus `uv.lock`: uv;
- otherwise `requirements*.in`: compiled requirements;
- both: uv, with a warning about stray `.in` files.

Shared rules:

- Preserve wildcard depth: `0.128.*` can become `0.130.*`, `4.*` stays `4.*`, and exact stays exact.
- Skip comments and unversioned extras.
- Report Git dependencies separately. Preserve their transport and exact-tag style unless the user changes it.
- Show the diff, apply it on confirmation, then regenerate the lockfile.
- A dependency bump does not authorize an entrypoint, process model, or runtime topology change.

## uv projects

Update `[project].dependencies` and each selected `[dependency-groups]` list. Then run:

```bash
uv lock --upgrade
uv sync --locked
```

Run the configured tests, lint, and type checks.

## Compiled requirements

Update the selected `*.in`, then run `uv pip compile <file>.in -o <file>.txt --upgrade`.
The `.in` file is the source and the `.txt` file is the generated lock.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.