fix-dependabot
Keep monorepo Dependabot updates in sync.
What it does
Fixes a Dependabot pull request by synchronizing dependency versions across a monorepo, regenerating its lockfile, and pushing the changes.
When to use it
Use when a Dependabot pull request leaves sibling packages on an old dependency version and the Bun lockfile out of date.
How to use it
Give it a Dependabot pull request number and its monorepo; it updates matching dependency declarations, regenerates the lockfile, and pushes the changes.
What you provide
- the pull request number
- An existing project
Uses
Good to know
- cannot be undone: GitHub
What you need · 3
Requires the GitHub CLI to retrieve the pull request's branch, changed files, title, and body.
Uses ripgrep to find matching dependency declarations in package.json files throughout the monorepo.
Requires Bun to install the project's dependencies and regenerate bun.lock from the repository root.
Access · 1
This skill
GitHub
Pushes changes and manages the PR (irreversible)