This is an automated email from the ASF dual-hosted git repository.

jungm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomee.git


The following commit(s) were added to refs/heads/main by this push:
     new b51b11c137 Bump maven-install-plugin to 3.2.0 and stop dependabot from 
proposing Maven 4 only plugins (#2982)
b51b11c137 is described below

commit b51b11c13742157a3075eb1b1de6785589c69688
Author: Markus Jung <[email protected]>
AuthorDate: Wed Sep 30 13:10:58 2026 +0200

    Bump maven-install-plugin to 3.2.0 and stop dependabot from proposing Maven 
4 only plugins (#2982)
    
    The 4.0.0 betas of the core Maven plugins require Maven 4 and fail the
    build on Maven 3. The io.smallrye:* ignore does not cover subgroups such
    as io.smallrye.config, so those are ignored explicitly.
---
 .github/dependabot.yml | 12 ++++++++++++
 pom.xml                |  2 +-
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 65af283f07..f102ebb850 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -32,6 +32,7 @@ updates:
       - dependency-name: "org.openjfx:*"
         # Ignore MicroProfile Implementation Updates - need to be carefully 
reviewed to align with target MP spec version
       - dependency-name: "io.smallrye:*"
+      - dependency-name: "io.smallrye.*:*"
         # Ignore MicroMeter Implementation Updates - need to be carefully 
reviewed to align with target MP spec version
       - dependency-name: "io.micrometer:*"
       - dependency-name: "io.opentelemetry:*"
@@ -76,6 +77,11 @@ updates:
           - "version-update:semver-major"
           - "version-update:semver-minor"
 
+        # Ignore Maven 4 only plugin releases - the build runs on Maven 3
+      - dependency-name: "org.apache.maven.plugins:*"
+        versions:
+          - ">= 4.0.0-alpha-1"
+
   - package-ecosystem: "github-actions"
     directory: "/"
     target-branch: "main"
@@ -99,6 +105,7 @@ updates:
       - dependency-name: "org.openjfx:*"
         # Ignore MicroProfile Implementation Updates - need to be carefully 
reviewed to align with target MP spec version
       - dependency-name: "io.smallrye:*"
+      - dependency-name: "io.smallrye.*:*"
         # Ignore MicroMeter Implementation Updates - need to be carefully 
reviewed to align with target MP spec version
       - dependency-name: "io.micrometer:*"
       - dependency-name: "io.opentelemetry:*"
@@ -143,6 +150,11 @@ updates:
           - "version-update:semver-major"
           - "version-update:semver-minor"
 
+        # Ignore Maven 4 only plugin releases - the build runs on Maven 3
+      - dependency-name: "org.apache.maven.plugins:*"
+        versions:
+          - ">= 4.0.0-alpha-1"
+
   - package-ecosystem: "github-actions"
     directory: "/"
     target-branch: "tomee-10.x"
diff --git a/pom.xml b/pom.xml
index 86476bdd95..93aa50d4a2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -253,7 +253,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-install-plugin</artifactId>
-          <version>3.0.0-M1</version>
+          <version>3.2.0</version>
         </plugin>
         <plugin>
           <groupId>org.apache.felix</groupId>

Reply via email to