(maven-jarsigner-plugin) branch master updated: Keep SLF4J on 1.7.x and Mockito on 4.x in Dependabot

[sl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-jarsigner-plugin.git


The following commit(s) were added to refs/heads/master by this push:
     new 7818dbc  Keep SLF4J on 1.7.x and Mockito on 4.x in Dependabot
7818dbc is described below

commit 7818dbc7de2faf61e9a7299b2531d4733856b472
Author: Sylwester Lachiewicz <sl...@apache.org>
AuthorDate: Mon Sep 21 21:18:54 2026 +0200

    Keep SLF4J on 1.7.x and Mockito on 4.x in Dependabot
---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f0138ad..0ab11b2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -20,6 +20,13 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    ignore:
+      # Mockito >=5 requires Java 11+
+      - dependency-name: "org.mockito:*"
+        versions: [">= 5.0.0"]
+      # Maven 3 so use SLF4J 1.7.x
+      - dependency-name: "org.slf4j:*"
+        versions: [">= 2.0.0"]
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: