arch-upgrade-deps skillA
arch-upgrade-deps is agent-read markdown (skill) from baristaze/swe_guidelines: Upgrade every dependency of the repository to its latest stable or LTS release (runtimes, tools, images, CI, Terraform, libraries), then run the gates and hold back what breaks..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# arch-upgrade-deps
The guideline keeps every dependency on its latest stable release, the
current active LTS line where the technology publishes one (Technology
Choices and How to Override Them, Versions, in
`${CLAUDE_SKILL_DIR}/../../architecture.md`; lens `DEL-26` in
`${CLAUDE_SKILL_DIR}/../../lenses/delivery.md`). Releases keep coming,
so a project drifts unless something moves it. This skill moves it in
one change, proves the change with the repository's own gates, and
leaves the working tree for a person to review.
## Input
`[<dependency> ...] [--plan] [--reset-local-data]`
Examples: empty (every dependency), `python node postgres`, `--plan`,
`valkey --reset-local-data`. Names limit the upgrade to those
dependencies. `--plan` stops after the plan table and edits nothing.
`--reset-local-data` lets the validation remove the local dependency
volumes when a backing service moves a major; without it the skill
never removes them. Nothing else is asked for.
## Procedure
1. Read the Versions subsection and `DEL-26` in full. Run
`git status`; refuse when the working tree has uncommitted changes,
so the diff this skill leaves holds only the upgrade.
…Read the whole file at its exact version.
How to install
mdr add baristaze/swe_guidelines/arch-upgrade-deps@git:20260922.28cefc1mdr add baristaze/swe_guidelines/arch-upgrade-deps@sha256:527ed7a6091a836cPin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_x2yebajq33fdvstp)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260922.28cefc1 latest | 2026-09-22 | 28cefc1 | 9,912 B | A | view · diff |
| git:20260922.e4ae97c | 2026-09-22 | e4ae97c | 8,530 B | A | view · diff |
| git:20260921.5c2df16 | 2026-09-21 | 5c2df16 | 8,771 B | A | view · diff |
| git:20260921.ec737e0 | 2026-09-21 | ec737e0 | 8,597 B | A | view · diff |
| git:20260920.9f5ac0a | 2026-09-20 | 9f5ac0a | 7,138 B | A | view · diff |
| git:20260920.2c50d81 | 2026-09-20 | 2c50d81 | 6,955 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9912 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
baristaze/swe_guidelines · 86 stars · license MIT · pushed 2026-09-22 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_x2yebajq33fdvstp GET https://markdownregistry.com/api/v1/resolve?ref=baristaze/swe_guidelines/arch-upgrade-deps GET https://markdownregistry.com/api/v1/blob/527ed7a6091a836cb80b58ce8b498ddc566de942eb2d8dfe98e81cb012051349
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.