Skip to content

feat: Add dependency bump scanner (Story 3, epic #1260)#4

Open
rubambiza wants to merge 1 commit into
kagenti:mainfrom
rubambiza:feat/dep-bump-scanner
Open

feat: Add dependency bump scanner (Story 3, epic #1260)#4
rubambiza wants to merge 1 commit into
kagenti:mainfrom
rubambiza:feat/dep-bump-scanner

Conversation

@rubambiza
Copy link
Copy Markdown
Contributor

@rubambiza rubambiza commented May 22, 2026

Summary

  • Add dep-bump-scanner.sh that monitors open Dependabot PRs across the kagenti org
  • Classifies PRs by severity tier (critical/high/medium/routine/major) with SLA thresholds
  • Creates tracking issues for stale PRs, auto-closes when PRs are merged
  • Includes ecosystem detection, coverage audit, and diff-against-previous logic
  • Add skill reference (skills/dep-bump/SKILL.md) and standing order

Implements kagenti/kagenti#1544 (Story 3 of epic kagenti/kagenti#1260).

Closes kagenti/kagenti#1544

Test plan

  • shellcheck passes
  • Local --dry-run detects 8 stale PRs across kagenti org
  • Remote --dry-run on kagenti-bot produces same results
  • Second run shows 0 new (diff logic works correctly)
  • Report JSON valid at reports/dep-bump/latest.json

Assisted-By: Claude Code

Assisted-By: Claude Opus 4.6 <noreply@anthropic.com>

Signed-off-by: Gloire Rubambiza <gloire@ibm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Implement dependency bump scanner script

1 participant