(maven-mvnd) branch master updated: Ignore mrm-maven-plugin 2.x for the mvnd-1.x Dependabot target

[sl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-mvnd.git


The following commit(s) were added to refs/heads/master by this push:
     new 53dadc00 Ignore mrm-maven-plugin 2.x for the mvnd-1.x Dependabot target
53dadc00 is described below

commit 53dadc00c1aef8484ece51faa011837b670af602
Author: Sylwester Lachiewicz <sl...@apache.org>
AuthorDate: Thu Sep 17 23:08:50 2026 +0200

    Ignore mrm-maven-plugin 2.x for the mvnd-1.x Dependabot target
    
    mrm-maven-plugin 2.0.0 declares a Java 17 prerequisite; mvnd-1.x still
    builds for Java 8. Master is on Java 17 and keeps receiving the bump.
    Drop this rule once the 1.x line moves to Java 17.
---
 .github/dependabot.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index bd481cb8..c5148138 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -42,6 +42,10 @@ updates:
     labels:
       - "backport"
       - "dependencies"
+    ignore:
+      # mrm-maven-plugin 2.x requires Java 17; the 1.x line builds for Java 8
+      - dependency-name: "org.codehaus.mojo:mrm-maven-plugin"
+        versions: [">= 2.0.0"]
 
   # Same allowlist cooldown as the master github-actions entry above.
   - package-ecosystem: "github-actions"