Help us improve
Share bugs, ideas, or general feedback.
From sanctum
Scans monorepo recursively for outdated dependencies in Python, Rust, JavaScript, Go ecosystems; detects conflicts, resolves versions, applies updates with code migration. Supports --dry-run and --ecosystem flags.
npx claudepluginhub athola/claude-night-market --plugin sanctumHow this command is triggered — by the user, by Claude, or both
Slash command
/sanctum:update-dependenciesThe summary Claude sees in its command listing — used to decide when to auto-load this command
# Update Dependencies Scan the repository for outdated dependencies across Python, Rust, JavaScript, and Go ecosystems. Detect conflicts, find compatible versions, and apply updates with code migration support. > **Note**: This command handles UPDATING existing dependencies. Before ADDING new dependencies, use the dependency-updater agent's verification checklist to validate version, security, and compatibility. ## Usage ## Options | Option | Description | |--------|-------------| | `--dry-run` | Show available updates without applying changes | | `--ecosystem <name>` | Limit to: pyt...
/upgrade-depsScans dependencies for updates in JS/TS and Python projects, analyzes changelogs for new features, performs verified updates, implements quick wins, and creates issues for larger opportunities.
/setup-updatesGenerates /update-app slash command to detect project type/package manager and update dependencies, fix deprecations/warnings, run quality checks, and verify clean installs.
/depsAudits project dependencies for security vulnerabilities (default), lists outdated packages, or previews upgrades across detected package managers. Outputs vulnerability lists, update tables, and prioritized fix commands.
/check-depsChecks project dependencies for vulnerabilities, outdated packages, and license issues across npm, pip, Composer, Bundler, and Go modules. Generates report with CVE details, upgrade paths, and commands.
/deps-auditScans project dependencies for vulnerabilities, outdated packages, license conflicts, and supply chain risks, then provides actionable remediation strategies.
/dependency-upgradeSafely upgrades outdated dependencies one at a time with test verification after each. Auto-detects package manager and categorizes by risk level.
Share bugs, ideas, or general feedback.
Scan the repository for outdated dependencies across Python, Rust, JavaScript, and Go ecosystems. Detect conflicts, find compatible versions, and apply updates with code migration support.
Note: This command handles UPDATING existing dependencies. Before ADDING new dependencies, use the dependency-updater agent's verification checklist to validate version, security, and compatibility.
# Check all ecosystems
/update-dependencies
# Preview without making changes
/update-dependencies --dry-run
# Limit to specific ecosystem
/update-dependencies --ecosystem python
| Option | Description |
|---|---|
--dry-run | Show available updates without applying changes |
--ecosystem <name> | Limit to: python, rust, javascript, or go |
Spawns a dependency-updater agent that:
Discovers all dependency files recursively in the monorepo
plugins/*/pyproject.tomlImportant: Always use recursive glob patterns (
**/pyproject.toml) orfindto discover ALL dependency files, not just root-level ones. Monorepos commonly have nested workspace members that need updating together.
Checks each ecosystem for available updates using native tooling
Analyzes version conflicts and breaking changes
Presents summary table for approval
Applies approved updates
Migrates code for breaking changes
Reviews final diff before committing
Scanning for dependency files...
Found 12 pyproject.toml, 0 Cargo.toml, 1 package.json, 0 go.mod
Python Updates Available:
| Package | Current | Latest | Status |
|-----------|---------|--------|-----------|
| requests | 2.28.0 | 2.31.0 | [OK] safe |
| django | 4.1 | 5.0 | [WARN] major |
| pydantic | 1.10 | 2.5 | [FIX] code |
JavaScript Updates Available:
| Package | Current | Latest | Status |
|-----------|---------|--------|-----------|
| typescript| 5.2.0 | 5.3.0 | [OK] safe |
Apply updates? [y/N]
For full functionality, these tools should be installed:
uv or pipcargo-outdated (cargo install cargo-outdated)npm or pnpmgo toolchainMissing tools are detected and skipped with a warning.
sanctum:dependency-updater