updating-daily

The daily, cheap maintenance pass: promote dependency soak-exclusions that have cleared their 7-day minimumReleaseAge window. A soak-exclude is a temporary bypass; once the package is old enough to install normally, the bypass is dead weight and should come out. Invoked daily by daily-update.yml (which routes through the same socket-registry reusable as the weekly run, opening a PR), or directly via /update-daily.

When to use

• The daily scheduled run (the workflow passes updating-skill: updating-daily).
• Any time you want to clear soaked exclusions from pnpm-workspace.yaml.

What it does NOT do

• npm version bumps. That's the weekly /updating umbrella's job (taze, lockstep, submodules). Daily is soak-promotion only — small, predictable, safe to run unattended.
• Add exclusions. Adding a soak-bypass is the Allow minimumReleaseAge bypass flow, not this skill.
• Touch repo-local non-exclude settings. Only minimumReleaseAgeExclude entries are promoted; the rest of pnpm-workspace.yaml is untouched.

Phases