lightdash/lightdash✦ 精选0°

renovate-pr

仓库创建 2021年3月19日最近提交 3 小时前SkillHot 收录 3 小时前

⬈ GitHub 仓库 ⬈ SKILL.md 原文件 ⬇ Raw 原始文件

▸ 精选理由

减少人工审查成本并提供可复核的证据链。

▸ 风险提示

需要在隔离环境运行未信任的 PR 代码，存在安全风险。

这个 Skill 做什么

自动检查并运行 Renovate 的依赖升级 PR，并给出有证据的合并建议。

把开放的 Renovate 依赖升级 PR 拉下来实测：检出分支、启动应用、触及受影响的代码路径，查 changelog 和必要时看上游 diff，然后给出是否可合并的建议。结论必须有证据链（读过 changelog、grep 到代码使用处、至少一项运行时检查），适合做依赖升级的三方把关或准入评估。

▸ 展开 SKILL.md 英文原文

Test and assess an open Renovate dependency-bump PR. Picks the first open Renovate PR, checks out the branch, starts the app, exercises code paths affected by the upgraded package, reviews the changelog and (if needed) the upstream source diff, and reports whether the bump is safe to merge. Use when asked to "test a renovate PR", "triage renovate", "assess a renovate bump", or "check a dependency upgrade".

开发编程依赖审查PR自动化运行时测试通用

6.0k

Stars

750

Forks

仓库内 Skill

积累中

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/lightdash/lightdash/main/.claude/skills/renovate-pr/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/lightdash/lightdash/main/.claude/skills/renovate-pr/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Renovate PR Triage

Pick the first open Renovate PR, run the app against it, exercise the affected code paths, and tell the user whether the bump is safe.

## Iron Law

**The recommendation MUST be evidence-backed.** "Looks fine" is not a recommendation. Each verdict must cite: changelog read, codebase usage grepped, and at least one runtime check (page loaded / endpoint hit / log inspected). If you can't gather evidence for an area, say so — never paper over it.

---

## Phase 0: Pick the PR

Find open Renovate PRs and take the first one:

```bash
gh pr list --state open --json number,title,headRefName,author,createdAt --limit 100 \
  | python3 -c "
import json, sys
prs = json.load(sys.st

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有