ACTIVATE for routine dependency maintenance on this WordPress-plugin project (both Composer and npm sides): bumping packages in composer.json + package.json, sweeping outdated libraries, running composer/npm audit, and producing a maintenance PR summary. Trigger when the user asks to update/upgrade dependencies, do a 'dep bump', refresh lockfiles against new releases, check for security advisories, or prepare a dependency-maintenance PR. Do NOT use for adding a brand-new package, removing one, switching @wordpress/scripts or @wordpress/env major versions, bumping the WordPress / PHP compatibility floor, or non-Composer/non-npm package managers.
2026-05-20