Upgrade Dep
- 12 installs
- 8.7k repo stars
- Updated August 4, 2026
- getsentry/sentry-javascript
upgrade-dep bumps a single Sentry JavaScript SDK dependency with safety checks.
About
The upgrade-dep skill guides maintainers through single-package dependency bumps in the Sentry JavaScript SDK workspace. It runs npx yarn-update-dependency@latest for the named package from the correct workspace root where yarn.lock lives, and warns against upgrading top-level or test dependencies without user approval. Before any OpenTelemetry package upgrade it blocks forbidden 2.x.x or 0.2xx.x versions via yarn info dependency inspection. E2E test application folders pinned by version in directory names must not receive major bumps that break the pinned stack. After upgrade it runs yarn install, yarn build:dev, yarn dedupe-deps:fix, yarn fix, and yarn circularDepCheck. Supplementary commands include yarn list, yarn why, yarn info versions, yarn outdated, and yarn audit for security review.
- Upgrades one package via yarn-update-dependency per run.
- Blocks forbidden OpenTelemetry version ranges before bump.
- Respects E2E test app version pins in directory names.
- Runs install, build:dev, dedupe, fix, and circularDepCheck.
- Documents yarn why, audit, and info helpers for review.
Upgrade Dep by the numbers
- 12 all-time installs (skills.sh)
- Ranked #415 of 733 Git & Pull Requests skills by installs in the Skillselion catalog
- Data as of Aug 5, 2026 (Skillselion catalog sync)
upgrade-dep capabilities & compatibility
- Capabilities
- single package yarn update dependency workflow · opentelemetry forbidden version guard · post upgrade verification command chain
- Works with
- github · sentry
- Use cases
- code review · devops
- Platforms
- macOS · Linux
- IDEs
- vscode · cursor ide
What upgrade-dep says it does
Only upgrade one package at a time.
npx skills add https://github.com/getsentry/sentry-javascript --skill upgrade-depAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 12 |
|---|---|
| repo stars | ★ 8.7k |
| Last updated | August 4, 2026 |
| Repository | getsentry/sentry-javascript ↗ |
How do I upgrade a package in sentry-javascript safely?
Upgrade one dependency at a time in the Sentry JavaScript SDK monorepo with post-bump verification.
Who is it for?
Maintainers bumping packages in the Sentry JavaScript SDK monorepo.
Skip if: Skip for application repos outside the sentry-javascript workspace.
When should I use this skill?
User upgrades, bumps, or patches a dependency in sentry-javascript.
What you get
Verified dependency bump with post-upgrade build and audit commands.
Files
Dependency Upgrade
Only upgrade one package at a time.
Upgrade command
npx yarn-update-dependency@latest [package-name]If the dependency is not defined in any package.json, run the upgrade from the root workspace (the yarn.lock lives there).
Avoid upgrading top-level dependencies (especially test dependencies) without asking the user first.
Ensure updated package.json files end with a newline.
OpenTelemetry constraint
STOP if upgrading any opentelemetry package would introduce forbidden versions:
2.x.x(e.g.,2.0.0)0.2xx.x(e.g.,0.200.0,0.201.0)
Verify before upgrading:
yarn info <package-name>@<version> dependenciesE2E test dependencies
Do not upgrade the major version of a dependency in dev-packages/e2e-tests/test-applications/* if the test directory name pins a version (e.g., nestjs-8 must stay on NestJS 8).
Post-upgrade verification
yarn install
yarn build:dev
yarn dedupe-deps:fix
yarn fix
yarn circularDepCheckUseful commands
yarn list --depth=0 # Check dependency tree
yarn why [package-name] # Find why a package is installed
yarn info <pkg> dependencies # Inspect package dependencies
yarn info <pkg> versions # Check available versions
yarn outdated # Check outdated dependencies
yarn audit # Check for security vulnerabilitiesRelated skills
Caveman CommitGenerate terse, Conventional Commits messages that preserve intent without fluff or AI attribution.272k94k
Resolving Merge ConflictsQuickly understand, resolve, and commit merge conflicts without losing work or breaking their flow.183k193kGit Guardrails Claude CodePrevent Claude Code from accidentally running destructive git commands like force push, hard reset, or clean.175k193k
Using Git WorktreesGuarantee every new feature or implementation task runs inside a clean, isolated workspace without polluting the main branch or current working directory.149k263k
Git CommitGenerate accurate conventional commit messages and intelligently stage files directly from natural language requests.40.6k37.2k
Resolve Merge ConflictsQuickly understand and resolve Git merge conflicts without losing context or breaking changes.16.5k148FAQ
What does upgrade-dep do?
upgrade-dep bumps a single Sentry JavaScript SDK dependency with safety checks.
When should I use upgrade-dep?
User upgrades, bumps, or patches a dependency in sentry-javascript.
Is this skill safe to install?
Review the Security Audits panel on this page before installing in production.