This is an automated email from the ASF dual-hosted git repository.
pkarwasz pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
The following commit(s) were added to refs/heads/2.x by this push:
new 8c84a97c0f Do not upgrade to Log4j API 3.x
8c84a97c0f is described below
commit 8c84a97c0f9cb08bc855989737d611b36aeb3ecc
Author: Piotr P. Karwasz <[email protected]>
AuthorDate: Sat Mar 30 23:19:17 2024 +0100
Do not upgrade to Log4j API 3.x
---
.github/dependabot.yaml | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index d72ce612e9..ee90d02cb2 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -158,7 +158,10 @@ updates:
update-types: ["version-update:semver-major"]
# Plexus Utils 4.x are for Maven 4.x
- dependency-name: "org.codehaus.plexus:plexus-utils"
- versions: ["4,)"]
+ versions: ["[4,)"]
+ # Don't upgrade to 3.x
+ - dependency-name: "org.apache.logging.log4j:log4j-api"
+ versions: ["[3,)"]
- package-ecosystem: github-actions
directory: "/"
