Skip to content

build(deps-dev): bump skills from 1.7.0 to 1.7.2 - #168

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/skills-1.7.2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/skills-1.7.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps skills from 1.7.0 to 1.7.2.

Release notes

Sourced from skills's releases.

v1.7.2

Changelog

  • feat(sync): add --recursive for workspace packages (#2446)
  • feat(sync): read optional and peer dependencies (#2445)
  • feat(factory): focus triage on bugs and suggest related issues (#2422)
  • fix: recognize BOM-prefixed skill frontmatter (#2421)
  • fix(factory): keep triage comments short and readable (#2420)
  • fix: preserve prototype-named skills in the local lock (#2419)
  • feat(factory): triage new bug-fix pull requests (#2418)
  • feat(sync): remember the last agent selection (#2405)
  • feat(sync): install git sources from package.json skills fields (#2403)
  • refactor(sync): trim skills field handling (#2402)
  • refactor(add): extract programmatic install primitives (#2401)
  • feat(sync): read npm: entries from package.json skills fields (#2400)
  • feat(sync): add --include and --exclude filters (#2399)
  • feat(sync): remove skills that dependencies no longer ship (#2398)
  • docs: clarify README instructions for listing skills (#2395)
  • feat: preselect Grok Build with the default install agents (#2365)
  • feat(sync): link skills into node_modules instead of copying (#2353)
  • feat(sync): read skills from direct dependencies only (#2349)
  • fix(update): honor locked paths with mirrored skills (#2231)
  • fix: use ~/.agents/skills for Codex global skills (#2067)
  • feat: remove skills by source (#1779)

Contributors

@​JonasBa,@​antfubot @​jp41011,@​karlhorky @​marcoscale98,@​quuu @​yuzhang-zhong

v1.7.1

Changelog

  • Use skills.sh telemetry endpoints directly (#2391)
  • Onboard skills CLI to Agent Factory (#2363)
  • test: restore private repo CI coverage (#2328)
  • fix: treat Pi as a universal (.agents/skills) agent (#2316)
  • fix: skip unchanged project skills in skills update (#2315)
  • Record global installs from a local path in the skill lock (#2301)

Contributors

@​AnonZ7,@​WenqingLi2023 @​archcorsair,@​quuu

Commits
  • 671e8c3 v1.7.2
  • c164f76 Merge pull request #2231 from yuzhang-zhong/fix/locked-skill-path-update
  • 7ee0191 Merge main and resolve private-repository test mocks
  • 4507e6f test: refresh private repository install mocks
  • 2e71ca0 fix(update): honor locked paths with mirrored skills
  • e878c45 feat(sync): add --recursive for workspace packages (#2446)
  • 061260b feat(sync): read optional and peer dependencies (#2445)
  • c75f604 feat(sync): install git sources from package.json skills fields (#2403)
  • 05bf938 Merge pull request #2422 from vercel-labs/codex/triage-bug-fix-comment
  • 2a7dc2a Merge pull request #2421 from vercel-labs/codex/skill-frontmatter-bom
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [skills](https://github.com/vercel-labs/skills) from 1.7.0 to 1.7.2.
- [Release notes](https://github.com/vercel-labs/skills/releases)
- [Commits](vercel-labs/skills@v1.7.0...v1.7.2)

---
updated-dependencies:
- dependency-name: skills
  dependency-version: 1.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 5, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #171.

@dependabot dependabot Bot closed this Nov 5, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/skills-1.7.2 branch November 5, 2026 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants