This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven-source-plugin.git
commit dffb540a6ebbd5ba83b352cd9a641be187f4fbd9 Author: Gerd Aschemann <[email protected]> AuthorDate: Tue Oct 27 08:13:07 2026 +0100 Scope Maven 3 core ignore to concrete artifacts Replace the broad `org.apache.maven:*` glob in the Maven 3 default ignore block with the specific core artifacts this module actually uses. Artifacts that share the groupId but follow their own release line (e.g. maven-archiver) are no longer caught. Addresses review feedback on the branch-switch Dependabot PR. Co-Authored-By: Claude Opus 4.8 <[email protected]> --- .github/dependabot.yml | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 4743a54..d932168 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -31,8 +31,17 @@ updates: # Maven 3 so use SLF4J 1.7.x - dependency-name: "org.slf4j:*" versions: [">= 2.0.0"] - # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch) - - dependency-name: "org.apache.maven:*" + # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch). + # Scoped to the core artifacts this plugin actually uses, so other + # org.apache.maven:* artifacts with their own release line (e.g. + # maven-archiver) are untouched. + - dependency-name: "org.apache.maven:maven-artifact" + versions: [">= 4.0.0"] + - dependency-name: "org.apache.maven:maven-core" + versions: [">= 4.0.0"] + - dependency-name: "org.apache.maven:maven-model" + versions: [">= 4.0.0"] + - dependency-name: "org.apache.maven:maven-plugin-api" versions: [">= 4.0.0"]
