Dependency Update Bot

by Varnan-Tech

Dependency Update Bot is a DevOps skill for Claude Code, published by Varnan-Tech in opendirectory.

621 stars66 forkson Varnan-Tech/opendirectoryAdded 2026/08/24+2% in starsRepository updated 2026/08/16

View source on GitHub Download repo ZIP

agent-skillsgtmhermes-agentmarketing-skillsopenclaw-skillsskill-packskillstechnical-seo

Install in seconds

Install Dependency Update Bot

Copy Dependency Update Bot into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/Varnan-Tech/opendirectory/tree/main/skills/dependency-update-bot ~/.claude/skills/dependency-update-bot

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/Varnan-Tech/opendirectory.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/dependency-update-bot/SKILL.md in Varnan-Tech/opendirectory
Installs to: ~/.claude/skills/dependency-update-bot
Collection: One of 25 skills cataloged from this repository
Category: DevOps — 798 skills

What Dependency Update Bot does

Dependency Update Bot scans projects for outdated npm, pip, Cargo, Go, or Ruby packages, runs a CVE audit, and groups upgrades by patch, minor, or major risk. It also fetches changelogs, summarizes breaking changes, and can diagnose install conflicts.

Dependency Update Bot is cataloged under DevOps on DirSkills. Dependency Update Bot comes from a repository tagged agent-skills, gtm, hermes-agent, marketing-skills and openclaw-skills.

Documentation

README

Excerpt

Dependency Update Bot

Scan for outdated packages. Run a security audit. Fetch changelogs. Summarize breaking changes. Open one PR per risk group.

Critical rule: Only update packages that the package manager's outdated command actually reports. Never guess or invent version numbers. If a changelog cannot be fetched, note the gap rather than inventing content.

Step 1: Setup Check

echo "GEMINI_API_KEY: ${GEMINI_API_KEY:+set}"
echo "GITHUB_TOKEN: ${GITHUB_TOKEN:-not set, changelog fetching rate-limited to 60/hour}"
gh auth status 2>/dev/null | head -1 || echo "gh: not authenticated"

If GEMINI_API_KEY is missing: Stop. Tell the user: "GEMINI_API_KEY is required. Get it at aistudio.google.com. Add it to your .env file."

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Dependency Update Bot

What else does Varnan-Tech publish alongside Dependency Update Bot?
Dependency Update Bot is one of 25 skills that DirSkills catalogs from Varnan-Tech/opendirectory, the repository it ships in. Its siblings there include App Store Review Arbitrage, Blog Cover Generator and Brand Alchemy. Each one is a separate skill with its own page in this directory, installs the same way Dependency Update Bot does, and is maintained by Varnan-Tech in that same repository. The rest of the collection is listed on the Varnan-Tech/opendirectory page.
How does Dependency Update Bot compare to other DevOps skills?
Dependency Update Bot ranks #640 by stars among the 798 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Dependency Update Bot against them. Open each page to compare what they document and how they install.