From 2fd18946a793d178851b8b412c7c738d87eae570 Mon Sep 17 00:00:00 2001 From: Mao Nakamoto <41178744+maonakamoto@users.noreply.github.com> Date: Mon, 31 Aug 2026 17:02:24 +0200 Subject: [PATCH] chore(deps): dependabot must not manage the ai-kit git pin MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit dependabot cannot order git tags: on 2026-08-31 it proposed v0.6.2 -> v0.4.0 as a bump — a downgrade that would have removed the registry, the grounding harness, and the CJS twin from this app had auto-merge taken it. The pin is governed by the fleet's version-currency ratchet (bitbaum/fleet, blessed-versions.json); dependabot now ignores ai-kit here. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01WqKqMnHQHSmkGFfc5t7Rxn --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b88f072c7..19fd54b75 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,12 @@ updates: interval: 'weekly' day: 'monday' open-pull-requests-limit: 10 + # ai-kit is pinned to a git TAG (github:bitbaum/ai-kit#vX.Y.Z). dependabot + # cannot order git tags and on 2026-08-31 proposed v0.6.2 -> v0.4.0 as a + # "bump" — a downgrade. The pin is governed by the fleet's version-currency + # ratchet (bitbaum/fleet, blessed-versions.json), not by dependabot. + ignore: + - dependency-name: 'ai-kit' # tiptap's packages share one version and break TypeScript's command # augmentation when bumped separately — they must move as one PR. groups: