This is an automated email from the ASF dual-hosted git repository. sergehuber pushed a commit to branch UNOMI-990-safe-dependency-updates in repository https://gitbox.apache.org/repos/asf/unomi.git
commit be5c053c41944f4866b30d7e2a6f7cdf538492e1 Author: Serge Huber <[email protected]> AuthorDate: Wed Sep 30 11:46:22 2026 +0200 UNOMI-990: Ignore risky Dependabot major upgrades Skip CXF 4, CometD majors, and graphql-java-annotations majors until planned stack work lands. --- .github/dependabot.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ed735e8b1..5ff928067 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,3 +8,15 @@ updates: - dependency-name: "org.apache.commons:commons-email" versions: - "> 1.3.3" + # Stay on CXF 3.6.x for now; CXF 4 is a major Jakarta/platform jump. + - dependency-name: "org.apache.cxf*" + update-types: + - "version-update:semver-major" + # Salesforce connector CometD/Jetty stack refresh is tracked in UNOMI-989. + - dependency-name: "org.cometd.java:*" + update-types: + - "version-update:semver-major" + # graphql-java-annotations majors need a matching graphql-java (+ scalars) upgrade. + - dependency-name: "io.github.graphql-java:graphql-java-annotations" + update-types: + - "version-update:semver-major"
