SKILL.md

name	dependency-automation
description	Review dependency automation, Renovate configuration, and automated updates.
metadata	source-of-truth renovate.json .github/renovate.json5 .github/workflows/renovate-automerge.yml

Dependency automation

Procedure

1. Read the repository configuration and the affected workflow.
2. Validate configuration changes with the repository's configured validator.
3. Preserve the configured authentication model; never add personal access tokens or credentials.
4. Confirm the pull request targets the development branch.
5. Run the default gate.

just check
pre-commit run --all-files

Do not document an automation rule until it is present in source configuration.

When to Use

Use for Renovate or dependency-automation behavior.

When NOT to Use

Do not use for Manual package changes that automation does not own.

Core Process

Read configuration, validate it, and preserve the configured auth model.

Common Rationalizations

• "A shortcut is harmless." Follow the source-of-truth and verification rules instead.

Red Flags

• Adding tokens or documenting rules absent from source.

Verification

• The selected source and focused command were checked.
• The repository default gate passes.