Skip to content

build(deps-dev): bump skills from 1.7.0 to 1.7.2 - #168

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/skills-1.7.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/skills-1.7.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps skills from 1.7.0 to 1.7.2.

Release notes

Sourced from skills's releases.

v1.7.2

Changelog

  • feat(sync): add --recursive for workspace packages (#2446)
  • feat(sync): read optional and peer dependencies (#2445)
  • feat(factory): focus triage on bugs and suggest related issues (#2422)
  • fix: recognize BOM-prefixed skill frontmatter (#2421)
  • fix(factory): keep triage comments short and readable (#2420)
  • fix: preserve prototype-named skills in the local lock (#2419)
  • feat(factory): triage new bug-fix pull requests (#2418)
  • feat(sync): remember the last agent selection (#2405)
  • feat(sync): install git sources from package.json skills fields (#2403)
  • refactor(sync): trim skills field handling (#2402)
  • refactor(add): extract programmatic install primitives (#2401)
  • feat(sync): read npm: entries from package.json skills fields (#2400)
  • feat(sync): add --include and --exclude filters (#2399)
  • feat(sync): remove skills that dependencies no longer ship (#2398)
  • docs: clarify README instructions for listing skills (#2395)
  • feat: preselect Grok Build with the default install agents (#2365)
  • feat(sync): link skills into node_modules instead of copying (#2353)
  • feat(sync): read skills from direct dependencies only (#2349)
  • fix(update): honor locked paths with mirrored skills (#2231)
  • fix: use ~/.agents/skills for Codex global skills (#2067)
  • feat: remove skills by source (#1779)

Contributors

@​JonasBa,@​antfubot @​jp41011,@​karlhorky @​marcoscale98,@​quuu @​yuzhang-zhong

v1.7.1

Changelog

  • Use skills.sh telemetry endpoints directly (#2391)
  • Onboard skills CLI to Agent Factory (#2363)
  • test: restore private repo CI coverage (#2328)
  • fix: treat Pi as a universal (.agents/skills) agent (#2316)
  • fix: skip unchanged project skills in skills update (#2315)
  • Record global installs from a local path in the skill lock (#2301)

Contributors

@​AnonZ7,@​WenqingLi2023 @​archcorsair,@​quuu

Commits
  • 671e8c3 v1.7.2
  • c164f76 Merge pull request #2231 from yuzhang-zhong/fix/locked-skill-path-update
  • 7ee0191 Merge main and resolve private-repository test mocks
  • 4507e6f test: refresh private repository install mocks
  • 2e71ca0 fix(update): honor locked paths with mirrored skills
  • e878c45 feat(sync): add --recursive for workspace packages (#2446)
  • 061260b feat(sync): read optional and peer dependencies (#2445)
  • c75f604 feat(sync): install git sources from package.json skills fields (#2403)
  • 05bf938 Merge pull request #2422 from vercel-labs/codex/triage-bug-fix-comment
  • 2a7dc2a Merge pull request #2421 from vercel-labs/codex/skill-frontmatter-bom
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [skills](https://github.com/vercel-labs/skills) from 1.7.0 to 1.7.2.
- [Release notes](https://github.com/vercel-labs/skills/releases)
- [Commits](vercel-labs/skills@v1.7.0...v1.7.2)

---
updated-dependencies:
- dependency-name: skills
  dependency-version: 1.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 15, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants