Analyze a single dependency version change
analyze_package_changeGiven one package and two versions (from -> to), returns a structured upgrade analysis: semver classification, GitHub release notes summary, detected breaking changes, security advisories fixed in the range, migration guide links, and a clear recommendation. Use when the user asks about a specific package upgrade ('what changed between react 18 and 19', 'is it safe to bump axios from 0.27 to 1.0', 'what does upgrading lodash 4.17.20 to 4.17.21 fix'). Supports npm, pypi, and github-actions (use the action reference as the name, e.g. actions/checkout). For analyzing many packages at once or a Dependabot batch, use analyze_packages_bulk instead.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Package name (e.g. 'react', 'requests') | |
| ecosystem | Yes | Package ecosystem | |
| toVersion | Yes | Target version (e.g. '19.0.0') | |
| fromVersion | Yes | Current version (e.g. '18.2.0') |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| package | Yes | Package name that was analyzed | |
| repoUrl | Yes | Source repository URL, or null when none could be resolved | |
| ecosystem | Yes | Package ecosystem | |
| toVersion | Yes | Version being upgraded to | |
| fromVersion | Yes | Version being upgraded from | |
| semverClass | Yes | Semver relationship between the two versions | |
| releaseCount | Yes | Number of GitHub releases found strictly between the two versions | |
| securityFixes | Yes | Advisories affecting fromVersion that are resolved at toVersion | |
| migrationLinks | Yes | Migration or upgrade guide URLs found in release notes | |
| recommendation | Yes | Single-line verdict explaining the recommendation level | |
| breakingChanges | Yes | Breaking changes extracted from release notes; empty when none were found | |
| releaseExcerpts | No | Raw release-note excerpts, present only as a fallback when a major/minor bump yielded no breaking changes | |
| recommendationLevel | Yes | Risk classification, used to rank packages in bulk results |