This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven-filtering.git
commit 7f40462f5a444b6332d54fb4801d3c24f6260302 Author: Gerd Aschemann <[email protected]> AuthorDate: Tue Oct 27 08:39:34 2026 +0100 Cap Maven 3 core ignore at 3.10 (stay on 3.9 baseline) Keep this shared component on the Maven 3.9 baseline, consistent with the ASF plugins it feeds (dev@ minimum-prerequisite decision, Nov 2025). Lower the core-artifact ignore from 4.0.0 to 3.10.0 so Dependabot no longer offers the 3.10 bump; 3.10 would also pull in Resolver 2.x. The open mavenVersion 3.10 PR (#422) auto-closes on the next Dependabot run once this merges. Co-Authored-By: Claude Opus 4.8 <[email protected]> --- .github/dependabot.yml | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9ec468f..1dac256 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -38,15 +38,16 @@ updates: # Maven 3 so use SLF4J 1.7.x - dependency-name: "org.slf4j:*" versions: [">= 2.0.0"] - # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch). - # Scoped to the core artifacts this component actually uses, so other + # Shared component kept on the Maven 3.9 baseline, consistent with + # the ASF plugins it feeds (dev@ 2025-11; 3.10 would pull Resolver 2.x). + # Scoped to the core artifacts this component uses; other # org.apache.maven:* artifacts with their own release line are untouched. - dependency-name: "org.apache.maven:maven-core" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - dependency-name: "org.apache.maven:maven-model" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - dependency-name: "org.apache.maven:maven-settings" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - package-ecosystem: "github-actions" directory: "/"
