(logging-log4j2) branch 2.x updated: Try to workaround dependabot/dependabot-core#8329

[pk...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

pkarwasz pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git


The following commit(s) were added to refs/heads/2.x by this push:
     new 70c3594b79 Try to workaround dependabot/dependabot-core#8329
70c3594b79 is described below

commit 70c3594b797c4a1643412c20d524bf48b8db780b
Author: Piotr P. Karwasz <pi...@karwasz.org>
AuthorDate: Mon Dec 4 09:15:16 2023 +0100

    Try to workaround dependabot/dependabot-core#8329
    
    Due to dependabot/dependabot-core#8329 many of our dependencies are not
    getting updated, this is an attempt to work around that.
---
 .github/dependabot.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 5caca4933e..206dd7847d 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -21,6 +21,10 @@ updates:
   schedule:
     interval: "daily"
   target-branch: "2.x"
+  allow:
+    # Restrict to Production dependencies to workaround:
+    #   https://github.com/dependabot/dependabot-core/issues/8329
+    dependency-type: "production"
   ignore:
     # Jetty 10.x does not have an internal logging API
     - dependency-name: "org.eclipse.jetty:*"
@@ -92,6 +96,10 @@ updates:
   schedule:
     interval: "daily"
   target-branch: "main"
+  allow:
+    # Restrict to Production dependencies to workaround:
+    #   https://github.com/dependabot/dependabot-core/issues/8329
+    dependency-type: "production"
   ignore:
     # Jetty 10.x does not have an internal logging API
     - dependency-name: "org.eclipse.jetty:*"