(maven-resolver) branch master updated: Stop dependabot from offering guice 7 on the 1.9.x line

[sl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-resolver.git


The following commit(s) were added to refs/heads/master by this push:
     new 02b81a8f2 Stop dependabot from offering guice 7 on the 1.9.x line
02b81a8f2 is described below

commit 02b81a8f29382658d1a1456ef491467376c38f80
Author: Sylwester Lachiewicz <sl...@apache.org>
AuthorDate: Sun Aug 23 12:28:56 2026 +0200

    Stop dependabot from offering guice 7 on the 1.9.x line
    
    Guice 6 moved to jakarta.inject. The Provider signature can be made to
    compile against both, but guice 7 also drops javax.inject annotation
    scanning, so AetherModule stops wiring. It is a migration, not a bump.
---
 .github/dependabot.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 29531dc02..8ff1d3d54 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -34,6 +34,8 @@ updates:
   ignore:
     - dependency-name: "biz.aQute.bnd:bnd-maven-plugin"
       versions: [ "[7.0.0,)" ]
+    - dependency-name: "com.google.inject:guice"
+      versions: [ "[6.0.0,)" ]
     - dependency-name: "com.hazelcast:hazelcast"
       versions: [ "[5.4.0,)" ]
     - dependency-name: "javax.servlet:javax.servlet-api"