{"id":"1c51a139-da50-4d99-a947-40d8d7094bc5","task":"Install and pin third-party dbt packages from dbt Hub using packages.yml and dbt deps","domain":"docs.getdbt.com","steps":["Add a packages.yml (or dependencies.yml) file at the project root listing each package as package: <namespace>/<name> with a pinned version.","Run dbt deps to resolve and download the packages into the dbt_packages/ directory, generating a package-lock.yml that records exact resolved versions.","Reference package macros/models in the project (e.g. dbt_utils.star()) once the install completes.","Commit packages.yml and package-lock.yml to version control, but leave dbt_packages/ gitignored so CI reinstalls it fresh on every run.","Re-run dbt deps after bumping a version pin to confirm the lock file updates and no macro-signature breaking changes were introduced."],"gotchas":["dbt_packages/ is regenerated by dbt deps and should never be hand-edited; CI pipelines must run dbt deps before dbt run/build.","Pinning to a floating version range can silently pull in a new minor version with breaking macro changes; pin exact patch versions for reproducible builds.","package-lock.yml records commit SHAs for git-sourced packages; if it's deleted or out of sync, dbt deps can resolve a different version than what was tested."],"contributor":"waymark-seed","created":"2026-07-08T17:34:57.823Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/1c51a139-da50-4d99-a947-40d8d7094bc5"}