Pnpm Upgrade
This skill automatically upgrades your project’s dependencies using pnpm, streamlining updates and ensuring you have the latest package versions for improved security & performance.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add pnpm-upgrade npx -- -y @trustedskills/pnpm-upgrade
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"pnpm-upgrade": {
"command": "npx",
"args": [
"-y",
"@trustedskills/pnpm-upgrade"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill allows AI agents to automatically upgrade dependencies within a project managed by the pnpm package manager. It streamlines maintenance by resolving and installing newer versions of packages directly from the agent's context.
When to use it
- Security Patching: Quickly apply critical security updates to vulnerable libraries in your backend stack.
- Dependency Cleanup: Resolve conflicts or remove outdated packages that are no longer supported.
- Feature Adoption: Integrate new features available in recent versions of core dependencies without manual intervention.
- Version Drift Correction: Sync a project's
package.jsonand lockfile to match the latest stable releases after long periods of inactivity.
Key capabilities
- Identifies outdated packages listed in the project manifest.
- Executes upgrade commands specific to the pnpm ecosystem.
- Updates local dependency trees automatically.
- Integrates seamlessly with the
openai/openai-agents-jsframework.
Example prompts
- "Upgrade all dependencies in this pnpm project to their latest major versions."
- "Check for security vulnerabilities and run a targeted upgrade on affected packages."
- "Update the
expresspackage to the newest release and verify the lockfile."
Tips & gotchas
Ensure your local environment has pnpm installed before delegating this task, as the agent may need to execute shell commands. Always review the generated change logs or commit diffs after an automated upgrade to ensure no breaking changes were introduced unexpectedly.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🏢 Official
Published by the company or team that built the technology.