dependency-upgrade skill (wshobson) for Claude Code: major version upgrades

Helps Claude plan and run major dependency upgrades in stages, with compatibility checks, tests and a rollback plan.

Installs: 11.3K; on skills.sh
Stars: 42.1K; on GitHub
Updated: Oct 2026; last repo commit

dependency-upgrade is a skill from wshobson/agents. Claude loads it when you upgrade major framework versions, update vulnerable dependencies, resolve conflicts or plan an upgrade path. SKILL.md is one file with npm and yarn commands, a compatibility matrix, a three-phase staged upgrade and a test strategy.

It also covers codemods, Renovate and Dependabot configs, lock file management, peer dependency fixes, workspace upgrades and a shell rollback script. The commands change your package.json and lock files, so work on a branch.

Good for

Developers upgrading React, TypeScript or other major dependencies
Teams fixing security-vulnerable packages
Maintainers setting up Renovate or Dependabot

Install dependency-upgrade

Claude Code

Copy this prompt.

Install the dependency-upgrade skill in Claude Code. Run this command:

npx skills add wshobson/agents --skill dependency-upgrade

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

Pick one route. The plugin routes install the whole framework-migration plugin: 4 skills, 2 agent file(s) and 3 command file(s), counted from the plugin folder in the repo tree, which has no hooks or MCP config files. The skills-only routes install just this skill, with no agents or commands.

Built from the package data we hold. Not yet tested by us. Source.

What's in the skill

When it loads

Manage major dependency version upgrades with compatibility analysis, staged rollout, and comprehensive testing. Use when upgrading framework versions, updating major dependencies, or managing breaking changes in libraries.

Sections in SKILL.md

When to Use This Skill
Semantic Versioning Review
Dependency Analysis
Audit Dependencies
Analyze Dependency Tree
Compatibility Matrix
Staged Upgrade Strategy
Phase 1: Planning
Phase 2: Incremental Updates
Phase 3: Validation
Breaking Change Handling
Identifying Breaking Changes
Codemod for Automated Fixes
Custom Migration Script
Testing Strategy
Unit Tests

Key facts

Author: Seth Hobson (wshobson)
Repository: wshobson/agents
License: MIT (plugin manifest)
Plugin: framework-migration (4 skills in the repo tree)
Installs on skills.sh: 11,299 (Nov 2, 2026)
GitHub stars (repo): 42,081 (Nov 2, 2026)
Last repo commit: Oct 30, 2026
Files: 1 file (SKILL.md only)

What it includes

npm outdated, npm audit, npm ls, npx npm-check-updates and yarn equivalents.
Includes npm audit fix and npx npm-check-updates -u, which edit package.json or lock files.
Runs code · Dependency analysis
A JavaScript sketch mapping React versions to react-dom, router and test library versions.
Compatibility matrix
Plan, update one major version at a time and run tests, then validate.
Phase 1 writes an UPGRADE_PLAN.md file. Phase 2 runs npm install for each package.
Runs code · Staged upgrade (3 phases)
Runs npx jscodeshift with a transform downloaded from a URL, with a dry run option.
The example fetches a React codemod from raw.githubusercontent.com and runs it on src/.
Runs code · Codemods
A Node script that rewrites source files with glob and regular expressions.
Files · Custom migration script
Unit, integration, visual regression and Cypress end-to-end examples.
Testing strategy
Renovate and Dependabot configuration examples.
Automated updates
A shell script using git stash, a new branch, tests, and git branch -D on failure.
If the tests fail the script checks out main and deletes the upgrade branch.
Delete · Rollback plan
npm ci, --legacy-peer-deps, --force and workspace upgrade commands.
Runs code · Lock files and peer deps

From the official docs

Permissions

Medium risk

The skill holds instructions, but they include commands that rewrite dependencies, run remote codemods and delete a branch. Work on a separate branch and read each command before approving it.

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

It edits dependencies and lock files
The staged upgrade runs npm install for each package, and the audit step includes npm audit fix. Run it on a clean branch with tests passing first. github.com
It runs a codemod from a URL
The codemod example uses npx jscodeshift with a transform downloaded from raw.githubusercontent.com. Open the transform before you run it, and use the --dry option first. github.com
Rollback script deletes a branch
The rollback example runs git stash and, on failure, git branch -D upgrade-branch. Check your branch names before running it. github.com

Technical details

Talks to	raw.githubusercontent.com (codemod and changelog downloads in the examples). Your package registry, when npm or yarn commands run

Questions

How do I install the dependency-upgrade skill?

Use the install box above. The skills CLI command installs only this skill. The plugin route installs framework-migration, which holds 4 skills, 2 agent file(s) and 3 command file(s) in the repo.

What does dependency-upgrade change in my project?

The folder bundles no scripts. The commands in SKILL.md, such as npm install, npm audit fix and codemods, edit your package.json, lock files and source if you or Claude run them. Use a separate branch and commit first.

Is dependency-upgrade safe to install?

The folder holds one Markdown file and no scripts. The risk is in commands it suggests. It runs a codemod from a remote URL with npx and its rollback script deletes a branch with git branch -D. Read each command before approving it.

Does it only work for JavaScript?

The examples are npm, yarn, React and TypeScript. SKILL.md does not show commands for other ecosystems.

What is in the framework-migration plugin?

The repo folder holds 4 skills (angular-migration, database-migration, dependency-upgrade, react-modernization), 2 agent files and 3 command files.

Does dependency-upgrade work in the Claude app or Codex?

The install box lists a zip upload for the Claude app and a plugin route for Codex. The wshobson/agents README names Claude Code, Codex CLI, Cursor, OpenCode, Antigravity CLI, GitHub Copilot and Pi as supported tools.

Information

updated Nov 2, 2026

Repository: wshobson/agents
Folder: plugins/framework-migration/skills/dependency-upgrade

wshobson/agents skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 8

wshobson/agents README · github.com
Marketplace manifest · github.com
Claude Code skills · code.claude.com
Using skills in Claude · support.claude.com
SKILL.md · github.com
skills.sh listing · skills.sh
Repository · github.com
framework-migration plugin folder · github.com