Update Dependencies

Scan the repository for outdated dependencies across Python, Rust, JavaScript, and Go ecosystems. Detect conflicts, find compatible versions, and apply updates with code migration support.

> Note: This command handles UPDATING existing dependencies. Before ADDING new dependencies, use the dependency-updater agent's verification checklist to validate version, security, and compatibility.

Usage

# Check all ecosystems
/update-dependencies

# Preview without making changes
/update-dependencies --dry-run

# Limit to specific ecosystem
/update-dependencies --ecosystem python

Options

What This Command Does

Spawns a dependency-updater agent that:

1. Discovers all dependency files recursively in the monorepo

• pyproject.toml (Python) - including nested workspaces like plugins/*/pyproject.toml
• Cargo.toml (Rust) - including workspace members
• package.json (JavaScript) - including monorepo packages
• go.mod (Go) - including submodules

> Important: Always use recursive glob patterns (**/pyproject.toml) or find to discover ALL dependency files, not just root-level ones. Monorepos commonly have nested workspace members that need updating together.

1. Checks each ecosystem for available updates using native tooling

1. Analyzes version conflicts and breaking changes

• Identifies incompatible version combinations
• Attempts to find compatible version sets
• Flags major version bumps requiring review

1. Presents summary table for approval

• Package name, current version, latest version
• Status: safe, major bump, needs code changes, conflict

1. Applies approved updates

• Updates dependency files
• Regenerates lock files
• Runs builds/tests to verify

1. Migrates code for breaking changes

• Identifies deprecated API usage
• Shows proposed fixes as diff
• Applies after approval

1. Reviews final diff before committing

Example Output

Scanning for dependency files...
Found 12 pyproject.toml, 0 Cargo.toml, 1 package.json, 0 go.mod

Python Updates Available:
| Package   | Current | Latest | Status    |
|-----------|---------|--------|-----------|
| requests  | 2.28.0  | 2.31.0 | [OK] safe    |
| django    | 4.1     | 5.0    | [WARN] major   |
| pydantic  | 1.10    | 2.5    | [FIX] code   |

JavaScript Updates Available:
| Package   | Current | Latest | Status    |
|-----------|---------|--------|-----------|
| typescript| 5.2.0   | 5.3.0  | [OK] safe    |

Apply updates? [y/N]

Requirements

For full functionality, these tools should be installed:

• Python: uv or pip
• Rust: cargo-outdated (cargo install cargo-outdated)
• JavaScript: npm or pnpm
• Go: go toolchain

Missing tools are detected and skipped with a warning.

See Also

• Agent: sanctum:dependency-updater