This is an automated email from the ASF dual-hosted git repository. ppkarwasz pushed a commit to branch feat/2.x/dependabot-2.26.x in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
commit a1fb9980fa9221051b4563a125d1b19a4c38b67d Author: Piotr P. Karwasz <[email protected]> AuthorDate: Wed Jun 24 21:31:12 2026 +0200 Add Dependabot config for the 2.26.x maintenance branch Configure a Maven update entry targeting the `2.26.x` branch that only proposes patch-level upgrades. All dependencies are bundled into a single `Maven patch updates` group with a 7-day cooldown. --- .github/dependabot.yaml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index 5c0cd9abb2..e7d9bf7726 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -166,6 +166,27 @@ updates: patterns: [ "*" ] target-branch: "2.x" + # The `2.26.x` maintenance branch only receives patch-level Maven updates. + - package-ecosystem: maven + directory: "/" + schedule: + interval: "monthly" + cooldown: + default-days: 7 + groups: + # "Bump the Maven patch updates group across N directories with M updates" + Maven patch updates: + patterns: [ "*" ] + target-branch: "2.26.x" + registries: + - maven-central + ignore: + # Only allow patch-level upgrades on this maintenance branch + - dependency-name: "*" + update-types: + - "version-update:semver-major" + - "version-update:semver-minor" + - package-ecosystem: maven directory: "/" schedule:
