You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@maven.apache.org by sl...@apache.org on 2026/09/21 19:23:46 UTC

(maven-file-management) branch master updated: Keep SLF4J on 1.7.x in Dependabot

This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-file-management.git


The following commit(s) were added to refs/heads/master by this push:
     new 60a5e26  Keep SLF4J on 1.7.x in Dependabot
60a5e26 is described below

commit 60a5e266016b386f1abb5bfb0246cd5f6ab59ab4
Author: Sylwester Lachiewicz <sl...@apache.org>
AuthorDate: Mon Sep 21 21:18:07 2026 +0200

    Keep SLF4J on 1.7.x in Dependabot
---
 .github/dependabot.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d7c9cd4..899ddf9 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -24,6 +24,9 @@ updates:
     ignore:
       # Ignore Maven Core updates
       - dependency-name: "org.apache.maven:*"
+      # Maven 3 so use SLF4J 1.7.x
+      - dependency-name: "org.slf4j:*"
+        versions: [">= 2.0.0"]
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: