Tech Radar: Stack Update Scanner

Checks for latest versions, breaking changes, deprecations, and security advisories across the user's core stack.

Core Stack to Monitor

Example only, replace with your own stack. The table below reflects one project's dependencies (a JS/TS stack). The skill detects your actual dependencies from the project manifest at runtime (package.json, requirements.txt, go.mod, composer.json, etc., see the description); this table is just a fallback of well-known packages to watch.

Execution Steps

1. Parse arguments: If user specified a package/framework, focus on that. Otherwise scan full stack.
2. Check latest versions using WebSearch:
   • Search: "{package} latest version {current_year}"
   • Compare against currently installed version (check the project manifest: package.json, requirements.txt, go.mod, composer.json, etc.)
   • Flag major version bumps (potential breaking changes)
3. Check for breaking changes:
   • For major version bumps: search "{package} v{new_major} migration guide"
   • Summarize key breaking changes that affect our patterns
   • Cross-reference against known patterns in MEMORY.md
4. Check security advisories:
   • Search: "{package} CVE {current_year}" or "{package} security advisory"
   • Flag any HIGH or CRITICAL severity issues
5. Check deprecations:
   • Search: "{package} deprecated features {current_year}"
   • Note any APIs we currently use that are deprecated

Output Format

## Tech Radar Report: {date}

### Upgrades Available
| Package | Current | Latest | Breaking? | Priority |
|---------|---------|--------|-----------|----------|
| nuxt    | 4.0.0   | 4.1.0  | No        | Low      |
| prisma  | 6.2.0   | 7.0.0  | YES       | High     |

### Breaking Changes (Action Required)
- **prisma 7.0**: No `url` in datasource block, driver adapter required [details]

### Security Advisories
- (none found / list any CVEs)

### Deprecation Warnings
- (none / list deprecated APIs we use)

### Recommendation
[1-2 sentences: upgrade now / wait / specific actions needed]

Smart Filtering

• Only report packages actually used in the active project (check the project manifest)
• Skip patch/minor version bumps unless they contain security fixes
• Prioritize: Security > Breaking Changes > Major Upgrades > Minor Upgrades
• If checking all projects: deduplicate (report each package once with all affected projects)