Skip to content

chore: add audit-fix-extensions agent skill#980

Open
cabljac wants to merge 1 commit intomainfrom
chore/audit-fix-skill
Open

chore: add audit-fix-extensions agent skill#980
cabljac wants to merge 1 commit intomainfrom
chore/audit-fix-skill

Conversation

@cabljac
Copy link
Copy Markdown
Collaborator

@cabljac cabljac commented Mar 31, 2026

Summary

Adds a .skills/audit-fix-extensions/ agent skill that codifies the workflow for consolidating dependency security fixes across all Firebase extensions.

What the skill covers

  • Checking local vs published marketplace versions before bumping
  • Running npm audit fix across all extensions (with the correct exclusions)
  • Determining new patch versions
  • Updating extension.yaml and CHANGELOG.md for each extension
  • Folding unpublished intermediate versions into the new version entry
  • Running formatting, committing, and opening the PR
  • Closing superseded dependabot PRs (with the right scope — not root-level or _emulator)

This was written based on the work done in #979.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant