[orc] branch main updated: ORC-868: Pin gson to 2.2.4 (#774)

[do...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

dongjoon pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/orc.git


The following commit(s) were added to refs/heads/main by this push:
     new e364a44  ORC-868: Pin gson to 2.2.4 (#774)
e364a44 is described below

commit e364a4438a930eb991ac538509897b35d9797a07
Author: Dongjoon Hyun <do...@apache.org>
AuthorDate: Mon Jul 26 00:09:39 2021 -0700

    ORC-868: Pin gson to 2.2.4 (#774)
    
    ### What changes were proposed in this pull request?
    
    This PR aims to pin `gson` to 2.2.4 explicitly.
    
    ### Why are the changes needed?
    
    Apache Hive 4.0 is still using 2.2.4 and Spark 3.1.2 distribution also has 2.2.4 due to that.
    - https://github.com/apache/hive/blob/master/pom.xml#L219
    ```
    <gson.version>2.2.4</gson.version>
    ```
    
    ### How was this patch tested?
    
    N/A. This will inform `dependabot` to ignore son 2.3+.
    
    This closes #766 .
---
 .github/dependabot.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8245eb7..182ccc8 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -19,3 +19,7 @@ updates:
     directory: "/java"
     schedule:
       interval: "weekly"
+    ignore:
+      # Pin gson to 2.2.4 because of Hive
+      - dependency-name: "com.google.code.gson:gson"
+        versions: "[2.3,)"