resolve-prs
A Claude Code skill that automatically resolves Dependabot PRs on your GitHub repos.
Instead of manually reviewing each Dependabot PR, this skill:
- Assesses risk - categorizes each PR as low/medium/high risk based on semver, peer deps, and framework constraints
- Fetches changelogs - pulls release notes and migration guides to anticipate breaking changes before testing
- Tests locally - checks out risky PRs and runs your project's compile, lint, and test commands
- Merges safe ones - auto-merges patch bumps and verified-safe updates
- Fixes breaking ones - migrates code for known breaking changes (API renames, config format changes, mock updates) and merges
- Closes incompatible ones - with a clear comment explaining why
- Learns from fixes - when it fixes a novel breaking change, it records the pattern so it handles it automatically next time
Install
/plugin marketplace add GijungKim/resolve-prs
/plugin install resolve-prs@resolve-prs
Or manually copy skills/resolve-prs/SKILL.md to ~/.claude/skills/resolve-prs/SKILL.md.
Usage
# Resolve PRs on the current repo
/resolve-prs
# Target a specific repo
/resolve-prs owner/repo
# Process all git repos in the current directory (parallel, one agent per repo)
/resolve-prs --all
# Assess PRs without taking action (just report)
/resolve-prs --dry-run
# Combine flags
/resolve-prs --all --dry-run
Prerequisites
- Claude Code installed
gh CLI authenticated with repo access- Your project's package manager (bun, npm, yarn, or pnpm)
What it knows about
The skill includes a growing knowledge base of common breaking changes it can detect and handle:
| Pattern | What it does |
|---|
| ESLint 8 -> 9+ | Detects flat config requirement, closes if not migrated |
| Jest major bumps | Checks framework preset compatibility (jest-expo, etc.) |
| react / react-dom mismatch | Closes if versions would diverge |
| react-native-mmkv 3 -> 4 | Migrates new MMKV() to createMMKV(), fixes .delete() -> .remove(), adds jest mock |
| Expo SDK pins | Respects Expo version constraints |
| Peer dependency conflicts | Detects and closes incompatible bumps |
Auto-learn
When the skill fixes a novel breaking change not in its knowledge base, it automatically records the pattern. This means it gets smarter the more you use it. Patterns are kept generalizable (not project-specific), capped at 30 per category, and consolidated when they get stale.
How --all works
When you pass --all, the skill:
- Finds all git repos within the current directory (up to 2 levels deep)
- Spins up a Claude team with one agent per repo
- Each agent independently runs the full PR resolution workflow
- Results are collected into a unified summary table
This is useful when you have a directory of projects (e.g., ~/projects/) and want to batch-resolve Dependabot PRs across all of them.
How --dry-run works
Dry-run mode goes through the full assessment workflow (listing PRs, fetching changelogs, categorizing risk, testing locally) but skips all merge/close/fix actions. The report uses "Would merge", "Would close", "Would fix & merge" so you can review what it plans to do before running it for real.
License
MIT
GijungKim