[GH] (ofbiz-framework/trunk): Workflow run "CodeQL" is working again!

[GitBox <gi...@apache.org>]

The GitHub Actions job "CodeQL" on ofbiz-framework.git/trunk has succeeded.
Run started by GitHub user mridulpathak (triggered by mridulpathak).

Head commit for run:
4c507382eeb052663ec1b8b4e53d7ffbd0fa22d7 / Mridul Pathak <mr...@gmail.com>
Fixed: Dependabot repeatedly reopening a commons-imaging alpha-to-alpha bump

commons-imaging has been alpha-only since 2019 (currently 1.0.0-alpha6, spanning six years with no GA in sight), and its API changed starting with 1.0.0-alpha4 in a way that would require real adaptation work in OFBiz, so we're deliberately staying pinned to 1.0-alpha3 until a stable 1.0.0 ships. The existing dependabot.yml only ignores semver-major bumps, which doesn't catch alpha-to-alpha updates within the nominal 1.0.0 line, so Dependabot kept reopening PR #1116 proposing a bump to 1.0.0-alpha6. This adds a dependency-specific ignore rule for commons-imaging scoped to versions below 1.0.0, so pre-release bumps stop recurring while a genuine 1.0.0 (or later) release still surfaces normally.

Report URL: https://github.com/apache/ofbiz-framework/actions/runs/33300139475

With regards,
GitHub Actions via GitBox