Update Dependencies

Treat every dependency upgrade as a migration across two codebases. A valid upgrade explains what changed upstream, where NemoClaw consumes those contracts, which migrations are required, and how each concern was resolved. Artifact hashes and green tests are gates, not substitutes for that analysis.

Mutation boundary

Treat every dependency repository, registry, release workflow, issue tracker, and pull-request queue as read-only. This skill authorizes changes only in NVIDIA/NemoClaw. Do not open upstream pull requests or issues, push upstream branches, post upstream comments, rerun upstream workflows, or change any repository other than NemoClaw. If the audit finds an upstream defect, record the evidence and downstream gate; require a separate explicit user request outside this workflow for any upstream action.

Progress checklist

Copy this checklist into the working plan and keep it current: