(maven) branch master updated: Keep Dependabot off Mockito 5 on maven-3.10.x and maven-3.9.x

[sl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven.git


The following commit(s) were added to refs/heads/master by this push:
     new 5b9b2b3685 Keep Dependabot off Mockito 5 on maven-3.10.x and maven-3.9.x
5b9b2b3685 is described below

commit 5b9b2b3685ca550442d388e012c993bab33e4175
Author: Sylwester Lachiewicz <sl...@apache.org>
AuthorDate: Tue Sep 29 18:36:14 2026 +0200

    Keep Dependabot off Mockito 5 on maven-3.10.x and maven-3.9.x
    
    Mockito 5 requires Java 11, and CI still builds on JDK 8.
---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0fd17138bf..689bccada1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -44,6 +44,9 @@ updates:
         versions: [ "[1.3.0,)" ]
       - dependency-name: "org.codehaus.plexus:plexus-cipher"
         versions: [ ">=2.1.0" ]
+      # Mockito 5 requires Java 11; the build still runs on JDK 8
+      - dependency-name: "org.mockito:*"
+        versions: [">= 5.0.0"]
 
   - package-ecosystem: "maven"
     directory: "/"
@@ -60,6 +63,9 @@ updates:
         versions: [ "[1.3.0,)" ]
       - dependency-name: "org.codehaus.plexus:plexus-cipher"
         versions: [ ">=2.1.0" ]
+      # Mockito 5 requires Java 11; the build still runs on JDK 8
+      - dependency-name: "org.mockito:*"
+        versions: [">= 5.0.0"]
 
   - package-ecosystem: "github-actions"
     directory: "/"