This is an automated email from the ASF dual-hosted git repository.
amaechler pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/master by this push:
new 6017fdd6a58 ci: give javacc, Checkstyle and SpotBugs updates their own
Dependabot PRs (#20776)
6017fdd6a58 is described below
commit 6017fdd6a5863f3935e7f2a34d363abb202e8810
Author: Andreas Maechler <[email protected]>
AuthorDate: Thu Oct 29 13:21:45 2026 -0600
ci: give javacc, Checkstyle and SpotBugs updates their own Dependabot PRs
(#20776)
* Give javacc, Checkstyle and SpotBugs updates their own Dependabot PRs
These build tools often need code or rule changes even in minor and
patch releases. Excluding them from the maven-minor-patch group gives
each update its own PR, which can be fixed or closed without holding
up the weekly group. Security updates are unchanged.
* Sort the Dependabot group exclusions alphabetically
---
.github/dependabot.yml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 718a85febce..24dd62323f1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -18,6 +18,12 @@ updates:
update-types: ["minor", "patch"]
patterns:
- "*"
+ # These build tools often need code or rule changes even in minor
releases, so each update gets its own PR
+ # that can be reviewed, fixed or closed without holding up the group.
+ exclude-patterns:
+ - "com.github.spotbugs:spotbugs-maven-plugin"
+ - "com.puppycrawl.tools:checkstyle"
+ - "org.codehaus.mojo:javacc-maven-plugin"
# Security updates skip the schedule and cooldown; batch them so an
advisory burst opens one PR.
maven-security:
applies-to: security-updates
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
