This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven-compiler-plugin.git
commit a220fac35a9855f962f73db37de08ee7723c0af7 Author: Gerd Aschemann <[email protected]> AuthorDate: Sun Oct 25 14:05:57 2026 +0100 Keep Dependabot off Maven 4 deps on the 3.x line master now carries the Maven 3 line after the apache/maven-sources#57 branch switch. The default Dependabot block had no upper bound on the org.apache.maven core artifacts, so once Maven 4 reaches GA Dependabot would bump mavenVersion to 4.0.0 on the Maven 3 line. Pin org.apache.maven below the 4.x boundary, mirroring the existing SLF4J/Mockito ignores. The *-4.x target-branch block is untouched, so the Maven 4 line keeps tracking 4.x. Refs: apache/maven-sources#57 Co-Authored-By: Claude Opus 4.8 <[email protected]> --- .github/dependabot.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b5018f43..14da08d3 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -31,6 +31,9 @@ updates: # Mockito 5 requires Java 11; the build still runs on JDK 8 - dependency-name: "org.mockito:*" versions: [">= 5.0.0"] + # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch) + - dependency-name: "org.apache.maven:*" + versions: [">= 4.0.0"] - package-ecosystem: "github-actions" directory: "/"
