v0.1.0 — MIT Licensed

BYOK Autonomous
Dependency Upgrade Framework

Patchwork detects outdated packages, analyzes changelogs for breaking changes, plans migration strategies, applies codemods, runs tests in isolation, and opens pull requests — all with your own LLM key.

Go binary — no runtime Local-first with Ollama Recipe-driven learning

Everything you need for
dependency upgrades

A complete pipeline from detection to pull request, designed for safety and repeatability.

🔍

Multi-Ecosystem Detection

Scan for outdated packages across Go modules, npm, pip, Cargo, Ruby (Gemfile), and Maven (pom.xml).

Breaking Change Analysis

Parse GitHub releases, changelogs, semver risk, or use LLM-powered analysis (Anthropic, Mistral, Groq, Ollama).

📖

Recipe-Driven Learning

Successful upgrades become reusable recipes. Future upgrades match against historical knowledge before falling back to LLM.

🛠️

Safe Codemod Application

Regex-based transformations for manifests — go.mod, package.json, requirements.txt, Cargo.toml, Gemfile, pom.xml.

🧪

Isolated Test Execution

Tests run in temp directories before changes touch your working tree. Supports Go, npm, Cargo, Bundler, and Maven.

🚀

PR Automation

Creates GitHub or GitLab pull requests for each upgrade — fully automated from detection to PR.

Architecture

Modular pipeline architecture with pluggable registries for each stage.

Detect
go.mod, pkg.json, req.txt, Cargo, Gemfile, pom.xml
Analyze
GitHub releases, changelogs, semver, LLM
Plan
Recipe matching, risk ordering
Apply
Codemods, manifest updates
PR
GitHub / GitLab API
Recipe Store Episode Log OS Keychain

Detector Registry

  • Go modules
  • npm / package.json
  • pip / requirements.txt
  • Cargo.toml
  • Gemfile (Bundler)
  • pom.xml (Maven)

Codemod Registry

  • Regex transformations
  • go.mod updates
  • package.json updates
  • requirements.txt updates
  • Cargo.toml updates
  • Gemfile / pom.xml updates

Test Runner Registry

  • go test
  • npm test
  • cargo test
  • bundle exec rspec
  • mvn test

LLM Providers

  • Anthropic Claude
  • Mistral
  • Groq
  • Ollama (local)

Supported Ecosystems

Detect, analyze, and upgrade packages across all major package managers.

Go Modules
go.mod
npm
package.json
pip
requirements.txt
Cargo
Cargo.toml
Ruby
Gemfile
Maven
pom.xml

Quick Install

Single command install, no runtime dependencies required.

curl (recommended)

curl -fsSL https://raw.githubusercontent.com/coder11125/patchwork/main/install.sh | bash

From source

git clone https://github.com/coder11125/patchwork.git
cd patchwork
make build
./bin/patchwork --help

Go install

go install github.com/coder11125/patchwork/cmd/patchwork@latest

CLI Commands

detect
analyze
plan
apply
pr
run
configure
serve

LLM Providers

Bring your own key — supports cloud LLMs and fully offline local models.

Ollama

llama3.2

Local, no API key needed

PATCHWORK_LLM_PROVIDER=ollama

Anthropic

claude-sonnet-4-20250514

Requires API key

PATCHWORK_LLM_PROVIDER=anthropic

Mistral

mistral-large-latest

Requires API key

PATCHWORK_LLM_PROVIDER=mistral

Groq

llama-3.3-70b-versatile

Requires API key

PATCHWORK_LLM_PROVIDER=groq