This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
The following commit(s) were added to refs/heads/2.x by this push:
new ffef6a692a Add Dependabot config for the 2.26.x maintenance branch
(#4149)
ffef6a692a is described below
commit ffef6a692aab7f88049bd9cc081d72653fee80b9
Author: Piotr P. Karwasz <[email protected]>
AuthorDate: Thu Jun 25 07:36:49 2026 +0200
Add Dependabot config for the 2.26.x maintenance branch (#4149)
Configure a Maven update entry targeting the `2.26.x` branch that only
proposes patch-level upgrades. All dependencies are bundled into a single
`Maven patch updates` group with a 7-day cooldown.
---
.github/dependabot.yaml | 21 +++++++++++++++++++++
1 file changed, 21 insertions(+)
diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 5c0cd9abb2..e7d9bf7726 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -166,6 +166,27 @@ updates:
patterns: [ "*" ]
target-branch: "2.x"
+ # The `2.26.x` maintenance branch only receives patch-level Maven updates.
+ - package-ecosystem: maven
+ directory: "/"
+ schedule:
+ interval: "monthly"
+ cooldown:
+ default-days: 7
+ groups:
+ # "Bump the Maven patch updates group across N directories with M
updates"
+ Maven patch updates:
+ patterns: [ "*" ]
+ target-branch: "2.26.x"
+ registries:
+ - maven-central
+ ignore:
+ # Only allow patch-level upgrades on this maintenance branch
+ - dependency-name: "*"
+ update-types:
+ - "version-update:semver-major"
+ - "version-update:semver-minor"
+
- package-ecosystem: maven
directory: "/"
schedule:
