chore(tooling): add Claude Code slash commands for housekeeping and security alerts#3251
Merged
Merged
Conversation
…ecurity alerts Ports two Claude Code slash commands from the nimbus repo, tailored to ui-kit: - /housekeeping — update pnpm-workspace.yaml catalog entries to latest minor/patch versions in risk-ordered cohorts, with validation between checkpoints. Accepts natural-language scope filters. - /github/fix-security-alerts — triage and fix Dependabot security alerts, with auto-fixable updates, validation, and optional PR creation.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
valoriecarli
approved these changes
May 19, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Ports two Claude Code slash commands from the nimbus repo, tailored to this
ui-kitmonorepo:/housekeeping— updatespnpm-workspace.yamlcatalog entries (catalog:andcatalogs.<name>:) to their latest minor/patch versions only, in risk-ordered cohorts, with build/lint/type/test validation between checkpoints. Accepts free-form scope filters (e.g."tooling only","storybook dry run","just the slate stack"). Thepeercatalog stays frozen./github/fix-security-alerts— triages Dependabot alerts in this repo, proposes a fix plan, applies auto-fixable updates after validation, and optionally pushes and opens a PR.Both files are pure tooling — they only land in
.claude/commands/and don't affect published packages, so no changeset is required.Test plan
/housekeeping dry runand confirm it enumerates catalogs without applying changes./github/fix-security-alertsand confirm it reaches the "present plan" phase against current Dependabot alerts before any commits are made./command palette.