managing_gradle_dependencies
Skill1.1k starsChanged 5 days agoApache-2.0View on GitHub
Audits and manages Gradle dependency graphs with high-resolution update checks, transitive tree analysis, and Maven Central discovery; use for dependency auditing, finding stable updates, and resolving GAV coordinates. Do NOT use for exploring dependency source code (use `searching_dependency_sources`) or running builds.
We split this skill into the rules it gives an agent
20 rules. About 0 are common, 7 are distinctive, and 13 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈7
Distinctive · estimate
This author's own choices. Worth a look.
13
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Very specific: line 19
ALWAYS: use inspect_dependencies for querying project dependency information instead of raw Gradle tasks.
- Very specific: line 21
ALWAYS: use updatesOnly: true to quickly identify available library updates.
- Very specific: line 22
ALWAYS: use lookup_maven_versions to find exact GAV coordinates for new libraries.
- Distinctive: line 23
NEVER: add a dependency to a project without verifying its authoritative version and existence on Maven Central.
- Very specific: line 24
ALWAYS: use the projectPath argument to target specific modules in multi-project builds.
- Very specific: line 28
Identify authoritative paths: ALWAYS use the Gradle project path (e.g., :app) when querying dependencies.
- Very specific: line 30
Monitor for updates: ALWAYS use updatesOnly: true in inspect_dependencies to retrieve a flat, high-signal report of available library …
- Very specific: line 32
Target dependencies surgically: Use the dependency parameter in inspect_dependencies to target a single library.
- Distinctive: line 34
Efficient Transitive Isolation: When isolating a single library, filter the flattened list of resolved components using the dependency …
- Very specific: line 36
Discover libraries surgically: ALWAYS use lookup_maven_versions to check the version history of an existing artifact.
- Very specific: line 38
Audit full trees: ALWAYS use onlyDirect: false in inspect_dependencies when you need to visualize the complete transitive dependency graph.
- Distinctive: line 42
Dependency Tree Auditing: When you need to visualize the full dependency graph for a specific project, configuration, or source set.
- Distinctive: line 43
Automated Update Detection: When performing maintenance and you want a concise report on available stable or pre-release updates.
- Distinctive: line 44
Precision Artifact Discovery: When looking for new libraries on Maven Central and you need to find exact GAV coordinates or explore an …
- Distinctive: line 45
Version Conflict Resolution: When you need to identify why a specific version of a library is being resolved and look for compatible …
- Distinctive: line 46
Targeted Audit: When you only care about a specific library and want to bypass the cost of a full project resolution.
- Very specific: line 63
Use lookup_maven_versions(coordinates="group:artifact") to see all available versions for a specific library.
- Very specific: line 113
Dependency Not Found: Verify the projectPath using the projects task in the introspecting_gradle_projects skill.
- Very specific: line 114
Update Not Showing: If a known update is missing, ensure stableOnly is set correctly and check if a versionFilter is active.
- Very specific: line 117
Maven Search No Results: Use broader search terms or verify the group:artifact format for version searches.
≈ “Common” is an estimate: at least 1 in 5 of the 308,232 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Authoritative Dependency Intelligence & Maven Central Search
Audits project dependencies, performs high-resolution update checks, and discovers new libraries on Maven Central with powerful, integrated search tools.
Constitution
- ALWAYS use
inspect_dependenciesfor querying project dependency information instead of raw Gradle tasks. - ALWAYS provide absolute paths for
projectRoot. - ALWAYS use
updatesOnly: trueto quickly identify available library updates. - ALWAYS use
lookup_maven_versionsto find exact GAV coordinates for new libraries. - NEVER add a dependency to a project without verifying its authoritative version and existence on Maven Central.
- ALWAYS use the
projectPathargument to target specific modules in multi-project builds.
Directives
- Identify authoritative paths: ALWAYS use the Gradle project path (e.g.,
:app) when querying dependencies. - Inspect plugins and build scripts: Build script dependencies (like plugins) are automatically included in
inspect_dependenciesoutput under configurations prefixed withbuildscript:(e.g.buildscript:classpath). - Monitor for updates: ALWAYS use
updatesOnly: trueininspect_dependenciesto retrieve a flat, high-signal report of available library updates:group:artifact: current → latestwith the project paths where each dep is used. Configuration and source-set detail is intentionally omitted; useinspect_dependencieswith a specificdependencyfilter if that detail is needed. - Target dependencies surgically: Use the
dependencyparameter ininspect_dependenciesto target a single library. It supportsgroup:name:version:variant,group:name:version,group:name, or justgroup. This is significantly faster than resolving the entire project graph. - Efficient Transitive Isolation: When isolating a single library, filter the flattened list of resolved components using the dependency filter rather than traversing the dependency graph. This naturally and efficiently excludes transitive dependencies that do not match the targeted filter.
- Discover libraries surgically: ALWAYS use
lookup_maven_versionsto check the version history of an existing artifact. - Use
gradlefor diagnostics: For built-in tasks likedependencyInsight, ALWAYS use thegradletool withcaptureTaskOutput. - Audit full trees: ALWAYS use
onlyDirect: falseininspect_dependencieswhen you need to visualize the complete transitive dependency graph.
When to Use
- Dependency Tree Auditing: When you need to visualize the full dependency graph for a specific project, configuration, or source set.
- Automated Update Detection: When performing maintenance and you want a concise report on available stable or pre-release updates.
- Precision Artifact Discovery: When looking for new libraries on Maven Central and you need to find exact GAV coordinates or explore an artifact's full version history.
- Version Conflict Resolution: When you need to identify why a specific version of a library is being resolved and look for compatible alternatives.
- Targeted Audit: When you only care about a specific library and want to bypass the cost of a full project resolution.
Workflows
1. Auditing Dependencies
- Identify the project module (e.g.,
:app). - Call
inspect_dependencies(projectPath=":app"). - Optionally filter by
configuration(e.g.,runtimeClasspath) orsourceSet(e.g.,test).
2. Checking for Stable Updates
- Call
inspect_dependencies(updatesOnly=true, stableOnly=true). - Review the flat list of upgradeable dependencies. Each entry shows
group:artifact: current → latestand the project paths where it is used.
3. Discovering New Libraries
- Use
lookup_maven_versions(coordinates="group:artifact")to see all available versions for a specific library.
4. Targeted Dependency Inspection
- Identify the dependency you want to check (e.g.,
org.mongodb:mongodb-driver-sync). - Call
inspect_dependencies(dependency="org.mongodb:mongodb-driver-sync"). - The report will be focused ONLY on that library across all matched configurations.
Examples
List dependencies for a specific module
{
"projectPath": ":app"
}
// Reasoning: Auditing the direct and transitive dependencies of the 'app' module to understand its runtime footprint.Check for updates for a specific library
{
"dependency": "org.jetbrains.kotlinx:kotlinx-coroutines-core",
"updatesOnly": true
}
// Reasoning: Surgically checking if a specific library has available updates.Check for stable updates across the project
{
"updatesOnly": true,
"stableOnly": true
}
// Reasoning: Performing a high-signal update audit that ignores unstable pre-release versions.List all versions of a specific library
{
"coordinates": "org.jetbrains.kotlinx:kotlinx-serialization-json"
}
// Reasoning: Retrieving the full version history of an artifact to identify the latest stable or specific version required.Troubleshooting
- Dependency Not Found: Verify the
projectPathusing theprojectstask in theintrospecting_gradle_projectsskill. - Update Not Showing: If a known update is missing, ensure
stableOnlyis set correctly and check if aversionFilteris active. - [UPDATE CHECK SKIPPED]: This annotation means the dep was in scope for update checking but its resolution genuinely failed — it does NOT appear for dependencies intentionally excluded from the update-check scope (e.g., transitive deps
when
onlyDirect=true, or deps excluded by adependencyfilter). - Maven Search No Results: Use broader search terms or verify the
group:artifactformat for version searches. - Missing environment variables: Set
invocationArguments: { envSource: "SHELL" }if Gradle cannot find expected env vars (e.g.,JAVA_HOME).
Trending
Quiet since September.about the whole repository
Who's talking about Kotlin/kotlinx-rpc
- bright-room/mindstock“fix(deps): update kotlinx.rpc to v0.10.4”GitHub · Sep 25, 2026
- bright-room/mindstock“fix(deps): update kotlinx.rpc to v0.10.3”GitHub · Jul 10, 2026
- modelix/modelix.editor“fix(deps): update kotlinx.rpc to v0.10.4”GitHub · Jul 6, 2026
- ktorio/ktor-plugin-registry“Bump the all-gradle group with 11 updates”GitHub · Jun 30, 2026
- DerTyp7214/synara-api“chore(deps): bump kotlinx-rpc from 0.10.2 to 0.10.3”GitHub · Jun 27, 2026
The biggest 5 of 16 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 16
Talked about on GitHub (16 times).
On GitHub · 16
- Sep 25, 2026fix(deps): update kotlinx.rpc to v0.10.4 — bright-room/mindstock0 reactions · 1 comment
- Jul 10, 2026fix(deps): update kotlinx.rpc to v0.10.3 — bright-room/mindstock0 reactions
- Jul 6, 2026fix(deps): update kotlinx.rpc to v0.10.4 — modelix/modelix.editor0 reactions · 1 comment
- Jun 30, 2026Bump the all-gradle group with 11 updates — ktorio/ktor-plugin-registry0 reactions
- Jun 27, 2026chore(deps): bump kotlinx-rpc from 0.10.2 to 0.10.3 — DerTyp7214/synara-api0 reactions · 1 comment
11 more on GitHub
- May 3, 2026Add compiler plugin implementation and Kotlin External FIR Support — TBSten/cream0 reactions
- Mar 30, 2026build(deps): bump kotlinx-rpc from 0.10.1 to 0.10.2 — modelix/modelix.editor0 reactions · 5 comments
- Jan 17, 2026chore(deps): bump kotlinx-rpc from 0.10.1 to 0.10.2 — DerTyp7214/synara-api0 reactions · 2 comments
- Dec 20, 2025build(deps): bump org.jetbrains.kotlinx:kotlinx-rpc-krpc-ktor-client from 0.10.0 to 0.10.1 — DerTyp7214/synara-api0 reactions · 1 comment
- Dec 20, 2025build(deps): bump org.jetbrains.kotlinx:kotlinx-rpc-krpc-ktor-server from 0.10.0 to 0.10.1 — DerTyp7214/synara-api0 reactions · 1 comment
- Jul 3, 2025Update kxrpc tutorial to 0.8.0 — ktorio/ktor-documentation0 reactions · 2 comments
- Jul 3, 2025Update kxrpc to 0.8.0 — ktorio/ktor-plugin-registry0 reactions · 1 comment
- Apr 4, 2025Update kxrpc to 0.6.0 — ktorio/ktor-plugin-registry0 reactions · 1 comment
- Jan 28, 2025Update kxrpc to 0.5.0 — ktorio/ktor-plugin-registry0 reactions
- Jan 7, 2025Migrate cloud-run server to RPC ProtoBuf — ashdavies/playground.ashdavies.dev0 reactions
- May 26, 2024KotlinでRemote Procedure Calls (RPC) を簡単に行えるライブラリkotlinx.rpc — AndroidDagashi/AndroidDagashi0 reactions
In this repository19 other files it gives its agents.
- CLAUDE.mdCLAUDE.md
- commit-changesSkill
- file-youtrack-issueSkill
- fix-issueSkill
- gh-stackSkill
- gradle_expertSkill
- interacting_with_project_runtimeSkill
- introspecting_gradle_projectsSkill
- researching_gradle_internalsSkill
- run-local-verificationsSkill
- running_gradle_buildsSkill
- running_gradle_testsSkill
- searching_dependency_sourcesSkill
- update-docSkill
- update-shimSkill
- use-develocitySkill
- use-teamcitySkill
- use-youtrackSkill
- verify-compiler-plugin-compatibilitySkill
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

