This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven-compiler-plugin.git
commit 7e73d04f6a76204ba843069de51ec6ee1809cd40 Author: Gerd Aschemann <[email protected]> AuthorDate: Tue Oct 27 08:13:07 2026 +0100 Scope Maven 3 core ignore to concrete artifacts Replace the broad `org.apache.maven:*` glob in the Maven 3 default ignore block with the specific core artifacts this module actually uses. Artifacts that share the groupId but follow their own release line (e.g. maven-archiver) are no longer caught. Addresses review feedback on the branch-switch Dependabot PR. Co-Authored-By: Claude Opus 4.8 <[email protected]> --- .github/dependabot.yml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 14da08d3..5c3dc8ff 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -31,8 +31,14 @@ updates: # Mockito 5 requires Java 11; the build still runs on JDK 8 - dependency-name: "org.mockito:*" versions: [">= 5.0.0"] - # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch) - - dependency-name: "org.apache.maven:*" + # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch). + # Scoped to the core artifacts this plugin actually uses, so other + # org.apache.maven:* artifacts with their own release line are untouched. + - dependency-name: "org.apache.maven:maven-artifact" + versions: [">= 4.0.0"] + - dependency-name: "org.apache.maven:maven-core" + versions: [">= 4.0.0"] + - dependency-name: "org.apache.maven:maven-plugin-api" versions: [">= 4.0.0"] - package-ecosystem: "github-actions"
