Read the changelogs before you upgrade dependencies
Breaking changes, security fixes and upgrade steps for each outdated package, from its release notes.
- You start it: When you start it
What it does
The task
Read the dependency file file url on GitHub and the open dependency update pull requests in the same repository. For each package with a newer version, open its changelog or release notes on GitHub, npm or PyPI. List the breaking changes, the security fixes and the migration steps between my version and the newest version. Rate each upgrade as safe, needs code changes or risky. Write a table, the risky ones first, with links to the release notes.
- It works in GitHub, npm and PyPI, in the workspace you pick, and signs in with passwords from your Cuiar vault.
- It runs once, when you start it.
What you give it
| Blank | What to give | Example |
|---|---|---|
| file url | The link to package.json, requirements.txt or a similar file | https://github.com/brightleaf/web/blob/main/package.json |
What you get back
An example run with the example values above. Your run uses your own data.
package.json in brightleaf/web: 9 packages have newer versions
| Package | From | To | Rating | Notes |
|---|---|---|---|---|
| next | 14.2.15 | 15.0.3 | Risky | Request APIs are async, caching defaults change. A codemod helps |
| stripe | 14.25.0 | 17.2.0 | Needs code changes | Pins a newer API version, some fields renamed |
| axios | 1.6.8 | 1.7.7 | Safe | Includes a security fix (CVE-2024-39338) |
| zod | 3.22.4 | 3.23.8 | Safe | New features, no breaking changes |
| react-hook-form | 7.51.0 | 7.53.1 | Safe | Fixes only |
... 4 more, all safe
Run it in Cuiar
- 01
Open it
Click Use in Cuiar on this page. The side panel opens with the task in the composer.
- 02
Fill in the blank
Type file url. Tab moves to the next blank.
- 03
Run it
Run sends it to the agent. Follow each step in the panel, and stop it at any time.
From the terminal
cuiar exec "Read the dependency file https://github.com/brightleaf/web/blob/main/package.json on GitHub and the open dependency update pull requests in the same repository. For each package with a newer version, open its changelog or release notes on GitHub, npm or PyPI. List the breaking changes, the security fixes and the migration steps between my version and the newest version. Rate each upgrade as safe, needs code changes or risky. Write a table, the risky ones first, with links to the release notes."Run it from your AI agent
Claude Code, Codex, Cursor and other MCP clients reach Cuiar at https://mcp.cuiar.com/mcp. Add the server one time, then ask for the task in plain words, or call run_task yourself.
1. Add Cuiar to Claude Code
claude mcp add --transport http cuiar https://mcp.cuiar.com/mcp2. Ask your agent
Use the Cuiar tool run_task to run my "Read the changelogs before you upgrade dependencies" template with file url = https://github.com/brightleaf/web/blob/main/package.json.Setup for other agents: AI agents.
The tool call
{
"name": "run_task",
"arguments": {
"task": "Read the dependency file https://github.com/brightleaf/web/blob/main/package.json on GitHub and the open dependency update pull requests in the same repository. For each package with a newer version, open its changelog or release notes on GitHub, npm or PyPI. List the breaking changes, the security fixes and the migration steps between my version and the newest version. Rate each upgrade as safe, needs code changes or risky. Write a table, the risky ones first, with links to the release notes."
}
}Related templates
All engineering templatesEngineering
Compare open-source libraries before you pick one
Downloads, releases, open issues, license and size of each library, with a recommendation.
You start it: When you start it- GitHub
- npm
- PyPI
Data
Collect stats for a list of GitHub repositories
Stars, last release, last commit, license, issues and downloads for each repository, in your sheet.
You start it: When you start it- GitHub
- npm
- PyPI
- +1 more: Google Sheets
EngineeringAsks first
Write release notes from merged pull requests
Merged PRs since the last release, grouped and written for users, saved as a draft GitHub release.
You start it: When you start it- GitHub
Engineering
Find flaky tests in your CI runs
Tests that fail and then pass on the same commit, with the count and the error, from your recent runs.
You start it: When you start it- GitHub
- Google Sheets
Engineering
Write an incident postmortem from the timeline
A blameless draft with the timeline, impact, cause and actions, built from chat, monitors and deploys.
You start it: When you start it- SSlack
- Datadog
- GitHub
- +1 more: Google Docs
Engineering
Search for fixes to an error message
Known causes and fixes for your error from forums, issues and docs, ranked by how well they match.
You start it: When you start it- Stack Overflow
- GitHub
- Any forum