From 20fcfcf5becd26b6d0a0afac1bc5df1a02ef8b40 Mon Sep 17 00:00:00 2001 From: Mao Nakamoto <41178744+maonakamoto@users.noreply.github.com> Date: Mon, 31 Aug 2026 17:02:30 +0200 Subject: [PATCH] chore(deps): dependabot must not manage the ai-kit git pin MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit dependabot cannot order git tags: on 2026-08-31 it proposed v0.6.2 -> v0.4.0 as a bump — a downgrade that would have removed the registry, the grounding harness, and the CJS twin from this app had auto-merge taken it. The pin is governed by the fleet's version-currency ratchet (bitbaum/fleet, blessed-versions.json); dependabot now ignores ai-kit here. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01WqKqMnHQHSmkGFfc5t7Rxn --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 554fa373..2f6622dd 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -15,6 +15,12 @@ updates: schedule: interval: weekly open-pull-requests-limit: 5 + # ai-kit is pinned to a git TAG (github:bitbaum/ai-kit#vX.Y.Z). dependabot + # cannot order git tags and on 2026-08-31 proposed v0.6.2 -> v0.4.0 as a + # "bump" — a downgrade. The pin is governed by the fleet's version-currency + # ratchet (bitbaum/fleet, blessed-versions.json), not by dependabot. + ignore: + - dependency-name: 'ai-kit' groups: minor-and-patch: update-types: [minor, patch]