Skip to content

chore(dependabot): ignore LLM provider SDKs (owned by maestro-llms)#225

Merged
dratner merged 1 commit into
mainfrom
chore/dependabot-ignore-llm-sdks
May 19, 2026
Merged

chore(dependabot): ignore LLM provider SDKs (owned by maestro-llms)#225
dratner merged 1 commit into
mainfrom
chore/dependabot-ignore-llm-sdks

Conversation

@dratner

@dratner dratner commented May 19, 2026

Copy link
Copy Markdown
Contributor

Post maestro-llms cut-over (#223), anthropic-sdk-go / openai-go / genai have zero direct imports in Maestro — they're indirect deps whose versions are pinned and CI-validated by maestro-llms. Dependabot bumping them in Maestro's go.mod only forces an untested transitive version under the toolkit (invisible to maestro-llms CI).

Adds ignore rules for the three so dependabot stops generating misdirected PRs (e.g. #216, #212, being closed). The dependency that matters — github.com/SnapdragonPartners/maestro-llms — stays tracked, and SDK bumps flow in through it once adopted upstream.

🤖 Generated with Claude Code

Post maestro-llms cut-over, anthropic-sdk-go / openai-go / genai are
indirect deps with zero direct imports in Maestro; their versions are
pinned and CI-validated by maestro-llms. Bumping them in Maestro's go.mod
only forces an untested transitive version under the toolkit. Ignore them
here so dependabot stops generating misdirected PRs; the bump that matters
(github.com/SnapdragonPartners/maestro-llms) is still tracked.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings May 19, 2026 19:25
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds Dependabot ignore rules for three LLM provider SDKs (anthropic-sdk-go, openai-go, genai) that became indirect dependencies after the maestro-llms cut-over in #223. Version management for these SDKs now happens upstream in maestro-llms, so Dependabot PRs against Maestro's go.mod would only pin untested transitive versions.

Changes:

  • Add ignore entries for the three LLM SDK modules under the Go modules Dependabot config
  • Document rationale inline explaining the ownership shift to maestro-llms

@dratner dratner merged commit d272332 into main May 19, 2026
14 checks passed
@dratner dratner deleted the chore/dependabot-ignore-llm-sdks branch May 19, 2026 22:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants