Skill Entry

安全升级依赖

升级 npm/pip/Cargo 依赖的结构化检查清单,涵盖 changelog 分析、semver 风险评估、lockfile 处理和冒烟测试,确保不破坏生产环境。

分类 维护
平台 Codex / Claude Code
发布时间 2026-04-24
dependenciesmaintenancesemver

使用场景

  • Routine version bumps
  • Security patch upgrades
  • Major version migrations

主要功能

  • Read the package changelog and release notes for all changed dependencies
  • Assess semver impact: patch (safe), minor (usually safe), major (review breaking changes)
  • Update lockfile and run full test suite locally
  • Check for deprecated API usage in your codebase that the new version removes
  • Pin exact versions in CI and run integration tests against the new versions
  • Document any config or API changes required in the upgrade notes

相关推荐

相关推荐

3 收录条目