This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven-source-plugin.git
commit ac1e37c1f202913f9fd68ceae500bc3fa43b768b Author: Gerd Aschemann <[email protected]> AuthorDate: Tue Oct 27 08:36:20 2026 +0100 Cap Maven 3 core ignore at 3.10 (stay on 3.9 baseline) The ASF minimum-prerequisite decision (dev@, Nov 2025, documented in compatibility-plan.md) keeps plugins on the Maven 3.9 baseline. Lower the core-artifact ignore from 4.0.0 to 3.10.0 so Dependabot no longer offers the 3.10 bump; 3.10 would also pull in Resolver 2.x. The open mavenVersion 3.10 PRs auto-close on the next Dependabot run once this merges. Co-Authored-By: Claude Opus 4.8 <[email protected]> --- .github/dependabot.yml | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d932168..17e12f1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -31,18 +31,19 @@ updates: # Maven 3 so use SLF4J 1.7.x - dependency-name: "org.slf4j:*" versions: [">= 2.0.0"] - # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch). - # Scoped to the core artifacts this plugin actually uses, so other + # ASF plugins stay on the Maven 3.9 baseline (min-prerequisite + # decision, dev@ 2025-11; 3.10 would pull in Resolver 2.x). + # Scoped to the core artifacts this plugin uses; other # org.apache.maven:* artifacts with their own release line (e.g. # maven-archiver) are untouched. - dependency-name: "org.apache.maven:maven-artifact" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - dependency-name: "org.apache.maven:maven-core" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - dependency-name: "org.apache.maven:maven-model" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - dependency-name: "org.apache.maven:maven-plugin-api" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - package-ecosystem: "github-actions"
