upgrade-deps
Skill23 starsChanged 13 days agoMITView on GitHub
Upgrade ruby2html's development/demo dependencies (Rails, view_component, phlex-rails, slim, rspec-rails, rubocop, lefthook, rake-compiler, ...) safely - bundle outdated, bump in small groups, run the full suite and benchmarks, record changes. Use when asked to update gems, fix outdated or vulnerable dependencies, or move to a new Rails/Ruby.
11 other projects use a version of this.
Adopted by
Most recently taken up by
- Kangentic/kangentictheir own version, first seen Nov 8, 2026
- F1bonacc1/process-composetheir own version, first seen Nov 1, 2026
- rpraharaj/ai-engineertheir own version, first seen Nov 1, 2026
- argos-ci/argostheir own version, first seen Oct 17, 2026
- ypxing/coding-crewtheir own version, first seen Oct 13, 2026
- areal-project/AReaLtheir own version, first seen Oct 8, 2026
Used with
Projects with it also use create-pr.
Other files people use alongside this one.
Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
SentrySkillcreate-pr
Create pull requests following Sentry conventions. Use when opening PRs, writing PR descriptions, or preparing changes for review. Follows Sentry's code review guidelines.
Also in 3 projects that use this
Other versions11 projects use a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 11
- areal-project/AReaL★ 5.9ksame name
- inclusionAI/AReaL★ 5.9ksame name
- line/armeria★ 5.2ksame name
- sorayuki/obs-multi-rtmp★ 5.1ksame name
- F1bonacc1/process-compose★ 2.9ksame name
- argos-ci/argos★ 657same name
- Kangentic/kangentic★ 140same name
- dennisrongo/claude-skills★ 1same name
- rpraharaj/ai-engineer★ 1same name
- ypxing/coding-crew★ 1same name
1 more not listed
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository7 other files it gives its agents.
- AGENTS.mdAGENTS.md
- llms.txtllms.txt
- add-html-tagSkill
- benchmarkSkill
- debug-renderSkill
- releaseSkill
- reviewSkill
The file
We split this skill into the rules it gives an agent
5 rules. 0 are common, 1 is distinctive, and 4 are very specific to this project.
0
Common
Most of the 11 edited versions we read keep these.
1
Distinctive
This author's own choices. Worth a look.
4
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Very specific: line 19
test: rspec-rails, capybara, benchmark-ips, faker
- Very specific: line 22
After each group: bundle exec rake compile, CI=1 bundle exec rspec, RUBY2HTML_DISABLE_EXT=1 bundle exec rspec spec/gem, bundle exec rubocop …
- Very specific: line 28
Never run bundle update with no arguments in one go.
- Very specific: line 29
Never relax required_ruby_version or add gemspec runtime deps without asking.
- Distinctive: line 30
Never commit or push unless asked.
“Common” is measured: kept by at least 6 in 10 of the 11 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Upgrade dependencies
Patch and minor updates arrive as grouped Dependabot PRs and auto-merge when CI passes; this skill is for what is left: major-version bumps (Dependabot PRs that did not auto-merge, or a manual upgrade). Do not pin or list versions in docs; the lockfiles are the record.
The Gemfile serves the demo app and specs; the gem's only runtime dependency is in ruby2html.gemspec (keep it minimal; htmlbeautifier is optional at runtime via the middleware's lazy require). Do not add runtime dependencies to the gemspec while upgrading.
Steps
- Baseline: clean tree,
bundle exec rake compile,CI=1 bundle exec rspecgreen, savebundle exec rake benchoutput (benchmarkskill) to the scratch dir. - Survey:
bundle outdated --only-explicit(andbundle outdatedfor transitive). Read each major bump's changelog/upgrade guide for breaking changes (Railsconfig.load_defaults, view_component major versions, phlex-rails majors, rspec-rails majors, lefthook config format). - Bump in groups, one commit-sized step each:
- framework:
rails(+sprockets-rails,web-console,bootsnap,puma,sqlite3) - view layer:
view_component,phlex-rails,slim-rails - test:
rspec-rails,capybara,benchmark-ips,faker - tooling:
rubocop-rails_config,lefthook,brakeman,rake-compilerEdit constraints inGemfile, thenbundle update <gems> --conservative. Checkgemfiles/*.gemfile(CI matrix gemfiles, e.g. per Rails line, andstandalone.gemfile) for constraints that need the same change; add a gemfile for a new Rails major. For Ruby: update.ruby-version(most CI jobs use it); the Ruby matrix itself is generated.
- framework:
- After each group:
bundle exec rake compile,CI=1 bundle exec rspec,RUBY2HTML_DISABLE_EXT=1 bundle exec rspec spec/gem,bundle exec rubocop(new cops: autocorrect only safe ones, review the diff),bin/brakeman --no-pager,bundle exec rake smoke. Fix breakages in the demo app (app/,config/) or specs; touchlib/gem/only for genuine compatibility fixes and note them in CHANGELOG. - Framework/view-layer upgrades: rerun benchmarks (
bundle exec rake bench; andbundle exec rspec spec/benchmarks/if Rails/ViewComponent/Phlex changed, ~6 min) and compare with the baseline. Report regressions; README tables only change on request. - Report: table of gem old → new, breakages fixed, test/benchmark results. CHANGELOG
### Changedonly if the gem's supported Ruby/Rails range or behavior changed.
Never
- Never run
bundle updatewith no arguments in one go. - Never relax
required_ruby_versionor add gemspec runtime deps without asking. - Never commit or push unless asked.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

