You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maven.apache.org by sl...@apache.org on 2026/08/28 09:30:46 UTC
(maven) 01/01: Ignore plexus-cipher 2.1.0+ on Maven 3.x branches in dependabot config (gh-12811)
This is an automated email from the ASF dual-hosted git repository.
slachiewicz pushed a commit to branch dependabot/plexus-cipher-ignore
in repository https://gitbox.apache.org/repos/asf/maven.git
commit 8a4ec52bc0d29fc698110df5b19b9624c4686a52
Author: Sylwester Lachiewicz <sl...@apache.org>
AuthorDate: Fri Aug 28 11:30:28 2026 +0200
Ignore plexus-cipher 2.1.0+ on Maven 3.x branches in dependabot config (gh-12811)
---
.github/dependabot.yml | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 15a63e0837..0fd17138bf 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -42,6 +42,8 @@ updates:
ignore:
- dependency-name: "ch.qos.logback:*"
versions: [ "[1.3.0,)" ]
+ - dependency-name: "org.codehaus.plexus:plexus-cipher"
+ versions: [ ">=2.1.0" ]
- package-ecosystem: "maven"
directory: "/"
@@ -56,6 +58,8 @@ updates:
versions: [ "[4.0.0,)" ]
- dependency-name: "ch.qos.logback:*"
versions: [ "[1.3.0,)" ]
+ - dependency-name: "org.codehaus.plexus:plexus-cipher"
+ versions: [ ">=2.1.0" ]
- package-ecosystem: "github-actions"
directory: "/"