[PR] Let Dependabot bump the Maven 4 API artifacts [maven-archiver]

["slachiewicz (via GitHub)" <gi...@apache.org>]

slachiewicz opened a new pull request, #394:
URL: https://github.com/apache/maven-archiver/pull/394

   `org.apache.maven:*` matches that groupId exactly, and on master the only dependencies in it are `maven-api-core`, `maven-api-model`, `maven-api-xml`, `maven-testing` and `maven-impl`, all on `${mavenVersion}`, currently `4.0.0-rc-6`. There is no minimum-Maven pin here to protect, so the wildcard only prevented Dependabot from offering the next release candidate.
   
   The `maven-archiver-3.x` config keeps its ignore. That branch does pin the runtime — `maven-core`, `maven-artifact` and `maven-model` at `mavenVersion` 3.9.16 — which is what the rule was written for.
   
   The same wildcard sits in twelve other repositories, some of which do need it and some of which do not; this is the first of them.
   
   *This change was created with AI assistance.*
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Let Dependabot bump the Maven 4 API artifacts [maven-archiver]

["slachiewicz (via GitHub)" <gi...@apache.org>]

slachiewicz merged PR #394:
URL: https://github.com/apache/maven-archiver/pull/394


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org