You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by sl...@apache.org on 2026/08/24 14:05:32 UTC

(maven-resolver) branch dependabot-plexus-xml-ignore-rationale created (now 3eb8f8277)

This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a change to branch dependabot-plexus-xml-ignore-rationale
in repository https://gitbox.apache.org/repos/asf/maven-resolver.git


      at 3eb8f8277 Record why the 1.9.x line pins plexus-xml to 3.x

This branch includes the following new commits:

     new 3eb8f8277 Record why the 1.9.x line pins plexus-xml to 3.x

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(maven-resolver) 01/01: Record why the 1.9.x line pins plexus-xml to 3.x

Posted by sl...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a commit to branch dependabot-plexus-xml-ignore-rationale
in repository https://gitbox.apache.org/repos/asf/maven-resolver.git

commit 3eb8f8277cb600f1a6780444239007c3378cceaa
Author: Sylwester Lachiewicz <sl...@apache.org>
AuthorDate: Mon Aug 24 16:04:52 2026 +0200

    Record why the 1.9.x line pins plexus-xml to 3.x
    
    The ignore looked like dead config after 3b0c7ebf dropped plexus-xml from
    the branch, and was nearly removed as such. It is live again: plexus-utils
    4.1.0 no longer carries org.codehaus.plexus.util.xml, so 1.9.x takes
    plexus-xml 3.1.0 for those classes. 4.x is Java 17 bytecode and fails
    enforce-bytecode-version on this branch. Do not delete this entry.
---
 .github/dependabot.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8ff1d3d54..49e18baf2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -40,6 +40,8 @@ updates:
       versions: [ "[5.4.0,)" ]
     - dependency-name: "javax.servlet:javax.servlet-api"
       versions: [ "[4.0.0,)" ]
+    # Still required: the branch depends on plexus-xml 3.1.0 again since
+    # plexus-utils 4.x moved org.codehaus.plexus.util.xml out. 4.x is Java 17.
     - dependency-name: "org.codehaus.plexus:plexus-xml"
       versions: [ "[4.0.0,)" ]
     - dependency-name: "org.eclipse.jetty:*"