You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@logging.apache.org by "ramanathan1504 (via GitHub)" <gi...@apache.org> on 2026/09/07 00:16:48 UTC

[PR] Update Dependabot ignore rules for Logback, Cassandra, Groovy, Elastic and Kroki [logging-log4j2]

ramanathan1504 opened a new pull request, #4305:
URL: https://github.com/apache/logging-log4j2/pull/4305

   Six bullets, each naming the PR it settles: #4301/#4253 (logback range corrected from the inert [1.3,)), #4285 (exclude-paths), #4210 (DataStax group ID differs from the     
     existing org.apache.cassandra:* rule), #4208/#4295 (Groovy 5 on 2.x only), #4302 (elastic doubles as the Docker tag), #4290 (kroki).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] Update Dependabot ignore rules for Logback, Cassandra, Groovy, Elastic and Kroki [logging-log4j2]

Posted by "ramanathan1504 (via GitHub)" <gi...@apache.org>.
ramanathan1504 merged PR #4305:
URL: https://github.com/apache/logging-log4j2/pull/4305


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] Update Dependabot ignore rules for Logback, Cassandra, Groovy, Elastic and Kroki [logging-log4j2]

Posted by "ramanathan1504 (via GitHub)" <gi...@apache.org>.
ramanathan1504 commented on code in PR #4305:
URL: https://github.com/apache/logging-log4j2/pull/4305#discussion_r3955994962


##########
.github/dependabot.yaml:
##########
@@ -206,6 +217,8 @@ updates:
         update-types:
           - "version-update:semver-major"
           - "version-update:semver-minor"
+      # elastic.version doubles as the Docker image tag; elasticsearch:8.17.11 does not exist

Review Comment:
   @vy [5594383](https://github.com/apache/logging-log4j2/pull/4305/commits/5594383afcd003fe3aee392990ad1e63e89247de)



##########
.github/dependabot.yaml:
##########
@@ -271,6 +284,11 @@ updates:
       # We must also ignore the old Group ID so Dependabot doesn't try to auto-migrate it.
       - dependency-name: "com.github.tomakehurst:wiremock*"
         versions: [ "[3,)" ]
+      # 0.18 is a 2.x-era plugin jar kept as a test fixture, not a dependency

Review Comment:
   @vy [5594383](https://github.com/apache/logging-log4j2/pull/4305/commits/5594383afcd003fe3aee392990ad1e63e89247de)



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] Update Dependabot ignore rules for Logback, Cassandra, Groovy, Elastic and Kroki [logging-log4j2]

Posted by "vy (via GitHub)" <gi...@apache.org>.
vy commented on code in PR #4305:
URL: https://github.com/apache/logging-log4j2/pull/4305#discussion_r3951935671


##########
.github/dependabot.yaml:
##########
@@ -206,6 +217,8 @@ updates:
         update-types:
           - "version-update:semver-major"
           - "version-update:semver-minor"
+      # elastic.version doubles as the Docker image tag; elasticsearch:8.17.11 does not exist

Review Comment:
   I'm not able to associate this comment with the line following it.



##########
.github/dependabot.yaml:
##########
@@ -271,6 +284,11 @@ updates:
       # We must also ignore the old Group ID so Dependabot doesn't try to auto-migrate it.
       - dependency-name: "com.github.tomakehurst:wiremock*"
         versions: [ "[3,)" ]
+      # 0.18 is a 2.x-era plugin jar kept as a test fixture, not a dependency

Review Comment:
   `0.18` of what? Can you type here the exact artifact coordinates, e.g., `foo:bar:1.2.3`?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@logging.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org