apply-project-updates

按授权批次安全应用依赖、运行时或工具链更新并保留可回滚路径。

在得到授权后分批安全地应用依赖、运行时、工具链、CI 或容器更新，并保证每次改动都有明确的回滚路径，不做盲目全量升级。在已选定目标版本并具备兼容性和迁移证据时使用。要求精确的组件与版本、验证命令和变更授权，保证每一步都可回退且有验证手段。

# Apply Project Updates

Implement only the approved update set and preserve a defensible rollback path.

## Confirm the selected batch

Require:

- exact components or an explicitly selected audit batch
- target versions, tags, or immutable commits when known
- compatibility and migration evidence
- repository-approved validation commands
- authorization for manifest, lockfile, toolchain, or infrastructure changes

If the request says only “update everything,” run or request a bounded audit
before mutation. Do not silently choose every available major version.

## Capture the baseline

1. Resolve the repository and applicable instructions.
2. Inspect Git status and preserve unrelated work.