| name | dependency-management |
| description | Audit and safely update Petstore dependencies with a reviewable PR. |
Dependency Management Skill
Use this skill for the manual or scheduled dependency-management workflow.
Goals
- Audit
pom.xml, GitHub workflow actions, and any Python helper dependencies used by the OpenHands demo.
- Prefer safe patch and minor updates.
- Avoid broad refactors or framework migrations.
- Open a draft PR with a compact summary of what changed and why.
Repository-specific guidance
- Main dependency surface is
pom.xml.
- Existing workflow actions live under
.github/workflows/.
- Existing release helper scripts live in
CI/.
- Verify updates with
mvn --no-transfer-progress -B test when feasible.
- If a dependency appears risky or major-version-only, explain it and defer it instead of forcing the upgrade.
Expected deliverables
- Minimal version bumps with rationale.
- Updated workflow action versions when clearly beneficial.
- Draft PR summarizing:
- updated dependencies
- deferred upgrades and why
- verification performed
- Add a short AI disclosure note in any GitHub-facing comment or PR body.