Agent Skills › elie222/inbox-zero › update-packages

update-packages

GitHub

指导在仓库中安全更新依赖包，遵循.pncurc.cjs的锁定列表，保持Node版本一致，并执行pnpm更新、安装及测试验证流程。

.claude/skills/update-packages/SKILL.md elie222/inbox-zero

Trigger Scenarios

用户请求更新依赖需要刷新包版本

Install

npx skills add elie222/inbox-zero --skill update-packages -g -y

More Options

Non-standard path

npx skills add https://github.com/elie222/inbox-zero/tree/main/.claude/skills/update-packages -g -y

Use without installing

npx skills use elie222/inbox-zero@update-packages

指定 Agent (Claude Code)

npx skills add elie222/inbox-zero --skill update-packages -a claude-code -g -y

安装 repo 全部 skill

npx skills add elie222/inbox-zero --all -g -y

预览 repo 内 skill

npx skills add elie222/inbox-zero --list

SKILL.md

Frontmatter

{
    "name": "update-packages",
    "description": "Update workspace packages while respecting the repo's pinned package list in .ncurc.cjs. Use when the user asks to update dependencies or refresh package versions."
}

Update Packages

Use this workflow when updating dependencies in this repo.

Steps

Check the pinned package list in .ncurc.cjs. Do not upgrade packages listed there.
Keep the repo on Node 24. If you change Node runtime settings, update .nvmrc, engines.node, @types/node, Dockerfiles, and CI together.
Update manifests across the workspace:

pnpm dlx npm-check-updates -u -ws

Refresh the lockfile and install updated packages:

pnpm install

Verify the update:

pnpm test
pnpm lint

Notes

npm-check-updates reads .ncurc.cjs, so the reject list is applied during the manifest update.
pnpm install may also bump the root packageManager field and regenerate pnpm-lock.yaml.
Do not run pnpm dev or pnpm build unless the user explicitly asks.
Keep @hookform/resolvers in the .ncurc.cjs reject list and pinned to 4.1.0 while apps/web remains on zod@3.25.76. The 5.x resolver line imports zod/v4/core, which has caused local Next.js/Turbopack resolution failures even though the app code still uses Zod 3.