slachiewicz opened a new pull request, #394:
URL: https://github.com/apache/maven-archiver/pull/394
`org.apache.maven:*` matches that groupId exactly, and on master the only
dependencies in it are `maven-api-core`, `maven-api-model`, `maven-api-xml`,
`maven-testing` and `maven-impl`, all on `${mavenVersion}`, currently
`4.0.0-rc-6`. There is no minimum-Maven pin here to protect, so the wildcard
only prevented Dependabot from offering the next release candidate.
The `maven-archiver-3.x` config keeps its ignore. That branch does pin the
runtime — `maven-core`, `maven-artifact` and `maven-model` at `mavenVersion`
3.9.16 — which is what the rule was written for.
The same wildcard sits in twelve other repositories, some of which do need
it and some of which do not; this is the first of them.
*This change was created with AI assistance.*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
