dependabot-resolve

name

dependabot-resolve

description

Comprehensive dependency update workflow for resolving Dependabot alerts and PRs. Use when: (1) User wants to update dependencies, (2) User mentions 'dependabot', 'security vulnerabilities', or 'dependency updates', (3) User asks to run security audit, (4) User wants to create a deps-update PR. Analyzes Dependabot issues, runs pnpm audit, applies updates, runs quality checks (typecheck, lint, test, build), handles Playwright Docker image sync, creates PR with changelog.

Dependabot Resolution Workflow

Execute a comprehensive dependency update workflow:

Step 1: Analyze Dependabot Issues

• Use gh issue list --label "dependencies" --state open --json number,title,url,body to list all open Dependabot issues
• For each issue, carefully analyze:
  • What dependency is being updated
  • What version change is proposed (patch/minor/major)
  • Any breaking changes mentioned
  • Security vulnerabilities fixed
• Determine which updates should be applied based on:
  • Security fixes (high priority)
  • Patch updates (generally safe)
  • Minor updates (review carefully)
  • Major updates (review very carefully for breaking changes)

Step 2: Run Security Audit

• Run pnpm audit to check for security vulnerabilities
• Identify any critical or high-severity issues
• Note any recommended updates from the audit

Step 3: Create Update Branch

If there are updates to apply:

• Get current date in MMDD format (e.g., "1220" for December 20th)
• Get the current branch name to use as base
• Create new branch: deps-update-MMDD from the current branch
• Switch to the new branch

Step 4: Apply Updates

• For each dependency to update: