| name | update-packages |
| description | Updates Composer, Craft CMS plugins, and Node packages. Commits each step separately, audits for vulnerabilities, and generates a PR description. |
| allowed-tools | Bash, Write, Read, Edit |
Update Packages
Updates Composer, Craft Plugins and node packages. Each step is committed separately.
Git Commit Convention
Each step that changes files must be committed separately using this template:
[UPDATES] <cli-command-from-step>
For example: [UPDATES] ddev composer update
Steps
Follow these steps in order:
1. Update Craft dependencies
ddev craft update all --interactive=0
This updates Composer packages related to Craft CMS. Commit any changes.
2. Update Composer dependencies
ddev composer update
This updates all Composer packages to their latest compatible versions. Commit any changes.
3. Update Node dependencies
ddev npm update
Commit any changes.
4. Check for vulnerabilities
Run both audits:
ddev composer audit
ddev npm audit
If vulnerabilities are found in either, write a vulnerability report to a markdown file in the root of the repository. If no issues are found, do nothing.
5. Create a Pull Request description
Write a markdown file to the root of the repo describing the updates and listing changed dependencies.
- Put changes into markdown tables, with a separate table for each dependency type (Craft, Composer, NPM)
- The user will handle creating the actual PR
- DO NOT commit this document to the repo
