Dep Cascade Dedup

Dispatch Surface

Target: Agent Teams

---

Purpose

After a release, automated dependency-bump PRs (Dependabot, Renovate) that target
the same package at an older version become stale. This skill identifies superseded
dep-bump PRs and closes them with a comment explaining the supersession.

Designed to run as a post-release hook or on-demand cleanup.

---

Usage

/dep-cascade-dedup
/dep-cascade-dedup --dry-run
/dep-cascade-dedup --repos omnibase_core,omniclaude
/dep-cascade-dedup --label dependencies

---

Behavior

Step 1: Discover repos and open dep PRs

For each repo (all OmniNode-ai repos discovered via gh repo list OmniNode-ai --json name, or filtered by --repos):

gh pr list --repo OmniNode-ai/{repo} --state open --label "${label:-dependencies}" --json number,title,headRefName,author,createdAt

Filter to PRs authored by dependabot[bot], renovate[bot], or app/dependabot.

Step 2: Group by package

Parse PR titles to extract package name and version. Common patterns:

• Bump {package} from {old} to {new}
• chore(deps): update {package} to {new}
• build(deps): bump {package} from {old} to {new}

Group PRs by (repo, package).

Step 3: Identify superseded PRs

For each (repo, package) group with multiple open PRs:

• Sort by target version (semver parse)
• The PR targeting the highest version is the keeper
• All others are superseded

Also check: if the package at the target version is already in the repo's lock file
(the dep was already bumped in main), ALL open PRs for that package are superseded.

Step 4: Close superseded PRs (unless --dry-run)

For each superseded PR, follow the
PR close preconditions and claim-before-close template
before the first close attempt. A peer claim stops this close. The claim and
close use the same executing lane, run and session; the registry CLI resolves
them, so this skill supplies no --lane override. The dry-run path executes
neither claim nor close.

Template inputs: pr_repo=OmniNode-ai/{repo}, pr_number={number} and
close_comment set to the supplied reason, or
Superseded by #{keeper_number} which targets {package}@{newer_version}. Closed by dep-cascade-dedup.

Step 5: Report

Output summary:

Dep Cascade Dedup Report
========================

| Repo | PR | Package | Version | Action |
|------|-----|---------|---------|--------|
| omnibase_core | #42 | pydantic | 2.9.1 | CLOSED (superseded by #45 -> 2.9.3) |
| omnibase_core | #45 | pydantic | 2.9.3 | KEPT |
| omniclaude | #100 | ruff | 0.8.0 | CLOSED (already on main) |

Closed: 2 | Kept: 1 | Repos scanned: 5

---

Integration Points

• release skill: Can invoke dep-cascade-dedup as a post-release cleanup step
• autopilot close-out: Can be added as an optional step after C1_release
• post_release_redeploy: Natural companion -- dedup deps after release, before redeploy