| name | dependency-pin-upgrade-blocker |
| description | enforce pinned dependency versions. Trigger when asked to upgrade packages, install new dependencies, or when reviewing package.json changes. Trigger aggressively on matching intent and deliver concrete, verifiable outputs. Prevent unpinned upgrades and verify version-lock integrity before accepting dependency changes. |
| compatibility | Node.js 22.13+, pnpm |
| metadata | {"version":"1.0.0","author":"neurotoxic-project","category":"tooling","keywords":["dependencies","versioning","pinning"],"maturity":"stable"} |
| license | Proprietary. See LICENSE.txt for terms |
Dependency Pin Guard
Strictly enforce pinned versions for critical dependencies to ensure stability and compatibility.
Pinned Versions
| Package | Pinned Major | Policy |
|---|
| React | 19.x | BLOCK v20+ |
| React DOM | 19.x | BLOCK v20+ |
| Vite | 8.x | BLOCK v9+ |
| Tailwind CSS | 4.x | BLOCK v5+ |
| Framer Motion | 12.x | BLOCK v13+ |
| Tone.js | 15.x | BLOCK v16+ |
| Pixi.js | 8.x | BLOCK v9+ |
| Node.js | >= 22.13.0 | BLOCK < 22.13.0 |
Workflow
-
Check package.json
Compare proposed changes against the pinned table.
- Minor/Patch upgrades: Allowed (e.g.,
19.2.0 -> 19.2.6).
- Major upgrades: Blocked unless explicitly authorized by a separate migration plan.
-
Verify Compatibility
- Tailwind v4: Must use
@import "tailwindcss". No @tailwind directives.
- Vite v8: Ensure config and plugins stay v8-compatible.
- Pixi v8: Ensure code uses v8 API (no
PIXI.InteractionManager, use eventMode).
-
Validate Node Version
Ensure .nvmrc and engines both require Node >= 22.13.0.
Example
Input: "Upgrade all packages to latest."
Action:
- Check
pnpm outdated.
- See
vite wants to go to 9.0.0 (hypothetically).
- Block: "Vite 9 is not supported yet. Keeping at 8.x."
- See
lodash wants to go to 4.17.21.
- Allow: "Updating lodash."
Output:
"Upgraded minor dependencies. Held back React (19.x), Vite (8.x), and Pixi (8.x) to pinned major versions to preserve stability."
Skill sync: compatible with React 19.2.6 / Vite 8.0.10 / Tailwind 4.2.4 baseline as of 2026-05-20.
