Engineering
Dependency Upgrade Agent
aka “Dependency Upgrader” in the catalog
Outdated and vulnerable dependencies caught, the upgrade prepared and tested on a branch, the changelog risk spelled out — a draft PR you merge, never one that merges itself.
Qoren environment
dependency-upgrader-agent
deploy dependency-upgrader --runtime managed
schedule tasks --timezone workspace
✓ agent online · monitoring
What it does
The Dependency Upgrade Agent, on autopilot.
Each task runs on its own schedule in a managed environment. Adjust any of them, or add your own.
Weekly on Monday at 06:00
Weekly Upgrade Sweep
Run the weekly upgrade sweep. For each repo in ~/workspace/REPOS.md: enumerate outdated and vulnerable DIRECT dependencies and rank them — severity first, then major→minor→patch risk. For the top N per ~/workspace/UPGRA…
Weekly Upgrade Sweep
Run the weekly upgrade sweep. For each repo in ~/workspace/REPOS.md: enumerate outdated and vulnerable DIRECT dependencies and rank them — severity first, then major→minor→patch risk. For the top N per ~/workspace/UPGRA…
last run · completed
Daily
Critical Cve Watch
Hourly: check for newly published security advisories (GitHub advisory data; Snyk too if configured) affecting a pinned dependency in a repo listed in ~/workspace/REPOS.md, new since ~/state/deps-seen.json (update it; e…
Critical Cve Watch
Hourly: check for newly published security advisories (GitHub advisory data; Snyk too if configured) affecting a pinned dependency in a repo listed in ~/workspace/REPOS.md, new since ~/state/deps-seen.json (update it; e…
last run · completed
Monthly on day 1 at 06:00
Monthly Dependency Report
Send the monthly dependency report: how far behind each repo is (major/minor/patch counts), packages that are EOL or unmaintained, upgrade PRs merged vs. still open, and the honest risk of not upgrading the laggards. On…
Monthly Dependency Report
Send the monthly dependency report: how far behind each repo is (major/minor/patch counts), packages that are EOL or unmaintained, upgrade PRs merged vs. still open, and the honest risk of not upgrading the laggards. On…
last run · completed
Example output
What it delivers.
A sample of what the Dependency Upgrade Agent produces. Illustrative, with fictional data.
Weekly Upgrade Sweep · Weekly on Monday at 06:00
Run the weekly upgrade sweep. For each repo in ~/workspace/REPOS.md: enumerate outdated and vulnerable DIRECT dependencies and rank them — severity first, then major→minor→patch risk. For the top N per ~/workspace/UPGRA…
Delivered to your inbox, Slack, or Telegram.
Memory
Keeps its own workspace.
The agent maintains a persistent workspace between runs, so context carries forward instead of starting from scratch every time.
- 01Who the owner is — business, timezone, quiet hours, delivery channel
- 02Watched repos with each one's package manager and exact test command, plus protected dependencies never to touch
- 03How eagerly to upgrade — patch/minor freely, majors as migration notes only, batch sizes, never-upgrade list
Deploy this template and Qoren provisions a dedicated, managed cloud environment: no Docker, VPS, or server upkeep. Tailor the persona, schedules, and tools, use the managed model key or bring your own, and the agent stays online with activity, usage, and spend in one dashboard.
Category
Engineering
Runtime
hermes
Scheduled tasks
3
Hosting
Fully managed
FAQ
Dependency Upgrade Agent template questions
Outdated and vulnerable dependencies caught, the upgrade prepared and tested on a branch, the changelog risk spelled out — a draft PR you merge, never one that merges itself. It runs 3 scheduled tasks on a managed cloud environment.
Works well with
Templates that pair well with this one.
Deploy it alongside these to cover the whole workflow.
Deploy the Dependency Upgrade Agent today.
Sign in, start from this template, and go live in minutes. Plans from $39/mo.