Read the changelogs before you upgrade dependencies

Breaking changes, security fixes and upgrade steps for each outdated package, from its release notes.

  • You start it: When you start it

What it does

The task

Read the dependency file file url on GitHub and the open dependency update pull requests in the same repository. For each package with a newer version, open its changelog or release notes on GitHub, npm or PyPI. List the breaking changes, the security fixes and the migration steps between my version and the newest version. Rate each upgrade as safe, needs code changes or risky. Write a table, the risky ones first, with links to the release notes.

  • It works in GitHub, npm and PyPI, in the workspace you pick, and signs in with passwords from your Cuiar vault.
  • It runs once, when you start it.

What you give it

BlankWhat to giveExample
file urlThe link to package.json, requirements.txt or a similar filehttps://github.com/brightleaf/web/blob/main/package.json

What you get back

An example run with the example values above. Your run uses your own data.

package.json in brightleaf/web: 9 packages have newer versions

PackageFromToRatingNotes
next14.2.1515.0.3RiskyRequest APIs are async, caching defaults change. A codemod helps
stripe14.25.017.2.0Needs code changesPins a newer API version, some fields renamed
axios1.6.81.7.7SafeIncludes a security fix (CVE-2024-39338)
zod3.22.43.23.8SafeNew features, no breaking changes
react-hook-form7.51.07.53.1SafeFixes only

... 4 more, all safe

Run it in Cuiar

  1. 01

    Open it

    Click Use in Cuiar on this page. The side panel opens with the task in the composer.

  2. 02

    Fill in the blank

    Type file url. Tab moves to the next blank.

  3. 03

    Run it

    Run sends it to the agent. Follow each step in the panel, and stop it at any time.

From the terminal

cuiar exec "Read the dependency file https://github.com/brightleaf/web/blob/main/package.json on GitHub and the open dependency update pull requests in the same repository. For each package with a newer version, open its changelog or release notes on GitHub, npm or PyPI. List the breaking changes, the security fixes and the migration steps between my version and the newest version. Rate each upgrade as safe, needs code changes or risky. Write a table, the risky ones first, with links to the release notes."

Run it from your AI agent

Claude Code, Codex, Cursor and other MCP clients reach Cuiar at https://mcp.cuiar.com/mcp. Add the server one time, then ask for the task in plain words, or call run_task yourself.

1. Add Cuiar to Claude Code

claude mcp add --transport http cuiar https://mcp.cuiar.com/mcp

2. Ask your agent

Use the Cuiar tool run_task to run my "Read the changelogs before you upgrade dependencies" template with file url = https://github.com/brightleaf/web/blob/main/package.json.

Setup for other agents: AI agents.

The tool call

{
  "name": "run_task",
  "arguments": {
    "task": "Read the dependency file https://github.com/brightleaf/web/blob/main/package.json on GitHub and the open dependency update pull requests in the same repository. For each package with a newer version, open its changelog or release notes on GitHub, npm or PyPI. List the breaking changes, the security fixes and the migration steps between my version and the newest version. Rate each upgrade as safe, needs code changes or risky. Write a table, the risky ones first, with links to the release notes."
  }
}
All engineering templates