This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven-compiler-plugin.git
commit f39fc6c5a91b996ece5af58d9f7bf93d392cc601 Author: Gerd Aschemann <[email protected]> AuthorDate: Tue Oct 27 08:36:13 2026 +0100 Cap Maven 3 core ignore at 3.10 (stay on 3.9 baseline) The ASF minimum-prerequisite decision (dev@, Nov 2025, documented in compatibility-plan.md) keeps plugins on the Maven 3.9 baseline. Lower the core-artifact ignore from 4.0.0 to 3.10.0 so Dependabot no longer offers the 3.10 bump; 3.10 would also pull in Resolver 2.x. The open mavenVersion 3.10 PRs auto-close on the next Dependabot run once this merges. Co-Authored-By: Claude Opus 4.8 <[email protected]> --- .github/dependabot.yml | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5c3dc8ff..0530a6db 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -31,15 +31,16 @@ updates: # Mockito 5 requires Java 11; the build still runs on JDK 8 - dependency-name: "org.mockito:*" versions: [">= 5.0.0"] - # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch). - # Scoped to the core artifacts this plugin actually uses, so other + # ASF plugins stay on the Maven 3.9 baseline (min-prerequisite + # decision, dev@ 2025-11; 3.10 would pull in Resolver 2.x). + # Scoped to the core artifacts this plugin uses; other # org.apache.maven:* artifacts with their own release line are untouched. - dependency-name: "org.apache.maven:maven-artifact" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - dependency-name: "org.apache.maven:maven-core" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - dependency-name: "org.apache.maven:maven-plugin-api" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - package-ecosystem: "github-actions" directory: "/"
