Dependency Upgrade

Treat the lockfile, manifest, release notes, runtime support, and repository tests as one compatibility surface.

Workflow

Identify the requested package, current and target versions, dependency ownership, and repository toolchain.
Read current primary-source release and migration guidance.
Check peer, transitive, runtime, generated-code, and related-package impact.
Separate mechanical version changes from required source migrations.
Make the smallest coherent update with the repository package manager.
Verify focused behavior, lockfile integrity, build and type checks, then broader checks proportional to risk.

For dependency-bot PRs, independently verify the current head and diff rather than trusting the bot summary. Read only the relevant reference: