feat(claude): add dependabot-triage skill#86
Merged
Conversation
Captures the workflow for safely landing automated dependency-update PRs: enumerate open Dependabot PRs, check each one's CI (not the title), merge the green independent ones, and handle bumps that only pass when landed together — lockstep dependencies such as nixpkgs + nix-darwin/home-manager, where each fails alone because they share a moving interface but succeed when bumped in the same lock update. Deploys automatically via the existing home/claude/skills -> ~/.claude/skills symlink; no home.nix change required. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016WThNHb4txVH79gMdnposV
rin2yh
force-pushed
the
claude/dependabot-prs-60j2hk
branch
from
6f06e0c to
0a223cd
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Adds a Claude Code skill,
dependabot-triage, that captures the workflow used to clear this repo's Dependabot backlog — so the next batch can be handled consistently.home/claude/skills/dependabot-triage/SKILL.md— a single self-contained skill file.The procedure it encodes
is:pr is:open author:app/dependabot).mergeable_state: unstableis not a green light — a check is failing or still pending.inputs.nixpkgs.follows = "nixpkgs". Bumping nixpkgs alone failed with--toc-depth has been removed, use --sidebar-depth instead; bumping nix-darwin alone failed withunrecognized arguments: --sidebar-depth. Opposite errors on the same tool → they must land together.How it was validated
Before finalizing, the skill was checked with the
skill-creatoreval methodology: a with-skill vs no-skill baseline across three scenarios (a lockstep pair in a mixed batch, a genuine breaking change, and a pending-not-failing trap), graded against assertions.The entire gap is the lockstep scenario: the baseline detects the coupling but stalls (defers, or drifts toward authoring a new combined PR), while the skill decisively co-merges the pair within Dependabot's own PRs. The two easier scenarios both pass with or without the skill — the skill reinforces good defaults without hurting them. (The eval fixtures themselves are kept out of the repo and are not part of this PR.)
Deployment
Picked up automatically by the existing
~/.claude/skills → home/claude/skillsout-of-store symlink inhome/home.nix; no config change needed. Kept YAML frontmatter (unlike the two older skills here) so it can auto-trigger on relevant requests rather than only via an explicit slash command.Notes
home/claude/skills/; no changes to existing config or the flake.ci.ymlis path-filtered to.nix/flake.lock, so this docs-only change runs no CI.5033334toc49796b#80–chore(deps): bump homebrew-core fromb420e2dtof6ae5a5#84) were already merged separately; this PR is just the reusable skill.🤖 Generated with Claude Code
https://claude.ai/code/session_016WThNHb4txVH79gMdnposV