360 Secure SkillHub
360 安全技能中心

upgrading-emdash

通过 upgrade-emdash 解析 npm 发布标签并更新直接依赖,生成 .emdash/UPGRADE.md 工作单;据此评估发布条目、修改源码与配置、运行格式化测试类型检查与构建,并在获得授权后按备份流程执行数据库迁移与部署验证。

emdash-cms
热度 0.00
最近更新 2026-10-19 02:20:20
分类:开发依赖:代码执行 / 读写文件 / 第三方 API应用场景:DevOps / 工作流 / 代码生成

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add emdash-cms/skills/upgrading-emdash
Metadata
name
upgrading-emdash
description
Upgrade an existing EmDash project with upgrade-emdash, interpret .emdash/UPGRADE.md, apply required project changes, and verify the package, skill, and migration result. Use when asked to update or upgrade EmDash dependencies. Do not use for an unrelated schema change or a known database migration without a package upgrade.

Upgrading EmDash

Use upgrade-emdash to resolve the selected npm release tag, update every direct EmDash package, refresh the EmDash skills, and create the project-specific work order. The updater does not edit application code, apply database migrations, or deploy.

Prepare the work order

Run from the project root:

npx upgrade-emdash@latest --dry-run
npx upgrade-emdash@latest

Use --to <tag> for another npm dist-tag such as next or beta. --to does not accept a version. Use --yes to accept the updater prompt in a non-interactive environment, --json for a machine-readable dry-run, and --cwd <path> when the project root is elsewhere.

The updater writes .emdash/UPGRADE.md. Read that file after the command finishes. It contains the complete authored changelog entries crossed by the direct packages in this project, with generated dependency-bump entries removed, plus the exact core migration delta found after installation.

Complete the upgrade

  1. Inspect the existing project and its uncommitted changes. Preserve unrelated work.
  2. Assess every release entry in .emdash/UPGRADE.md against the project. Apply required source and configuration changes. Do not adopt a new feature when the project does not use the affected surface.
  3. Run the repository's relevant format, tests, typecheck, and build commands.
  4. Run the migration status command from the work order and report the target database and pending migrations.
  5. When the work order lists added core migrations, the status command reports an earlier pending migration, or a release entry requires a data-changing project action, follow the work order's backup procedure before starting or deploying the upgraded application.
  6. Ask before applying a migration to a database, deploying, or making any other remote change unless the user explicitly included that action in the request.
  7. After authorized migration and deployment work, run the migration check and verify the affected site paths.

Treat core migrations as forward-only. A package update with no added or pending migrations does not require an upgrade-specific recovery point. Before an authorized database-changing step, require a restorable database backup created with Backups and recovery, a separate media backup, the relevant encryption keys, and the same build artifact for migration and deployment. A JSON backup is not a recovery point. Roll back by restoring the matching database and application artifact together, not by running migration down() functions or deleting migration records.