dep-update

Automated Dependency Update Manager

$ARGUMENTS = optional flags for scope control (--security-only, --major, --dry-run, or combination).

Parse the arguments:

• --security-only — Only apply packages with known CVEs/security advisories. Skip all non-security updates.
• --major — Include major version bumps (breaking changes). Without this flag, major bumps are skipped and reported.
• --dry-run — Analyze and report what would be updated, but make ZERO changes to any files.
• No arguments — Apply patch and minor updates. Skip major bumps. Report everything.

---

Step 1: Detect Project Type and Inventory Current Dependencies

1a: Identify Package Ecosystem(s)

Scan the project root and subdirectories to determine what package ecosystems are in use.

echo "=== Detecting Project Type ==="

# Python indicators
echo "--- Python ---"
ls -la requirements*.txt 2>/dev/null
ls -la pyproject.toml 2>/dev/null
ls -la setup.py 2>/dev/null
ls -la setup.cfg 2>/dev/null
ls -la Pipfile 2>/dev/null
ls -la poetry.lock 2>/dev/null
ls -la uv.lock 2>/dev/null

# Node.js indicators
echo "--- Node.js ---"
ls -la package.json 2>/dev/null
ls -la package-lock.json 2>/dev/null
ls -la yarn.lock 2>/dev/null
ls -la pnpm-lock.yaml 2>/dev/null
ls -la bun.lockb 2>/dev/null

# Rust indicators
echo "--- Rust ---"
ls -la Cargo.toml 2>/dev/null

# Go indicators
echo "--- Go ---"
ls -la go.mod 2>/dev/null

# Java/Gradle indicators
echo "--- Java/Gradle ---"
ls -la build.gradle.kts build.gradle pom.xml 2>/dev/null
ls -la gradle/wrapper/gradle-wrapper.properties 2>/dev/null

Determine the primary and secondary ecosystems. A project may have BOTH backend and frontend dependencies (e.g., FastAPI/NestJS/Spring Boot backend + Next.js frontend). Handle each ecosystem independently.

For Java/Gradle projects, use:

• ./gradlew dependencies to list all dependencies
• ./gradlew dependencyUpdates (with com.github.ben-manes.versions plugin) to check for updates
• Update versions in build.gradle.kts directly
• Run ./gradlew build test after each update to verify