0
Dependency upgrade risk assessment before a major version bump
I'm considering upgrading package_name from current_version to target_version in project_context. Before I do it, help me assess the risk:
1. Based on the changelog/release notes I paste, categorize changes into: breaking (will require code changes), behavioral (same API, different runtime behavior, could cause silent bugs), and safe (additive, no action needed).
2. For each breaking or behavioral change, scan the usage patterns I describe and tell me concretely whether my codebase is likely affected, not just 'check if you use this feature'.
3. Estimate blast radius: how many places in a typical codebase this size would need changes, based on how core this package is to what I describe.
4. Recommend an upgrade strategy: direct jump, or step through intermediate major versions, based on how many breaking changes are involved.
5. Give me a smoke-test checklist specific to what changed, not a generic 'run your test suite' answer.
Changelog/release notes: changelog
How we use this package: usage_description
Current test coverage of affected areas: coverage_notes