holgerfriedrich opened a new pull request, #2597:
URL: https://github.com/apache/karaf/pull/2597

   This PR tunes the behaviour of dependabot for the 4.4.x branch.
   
   * Introduce prefix "[4.4.x] " for PR titles
   * maven package updates: ignore new major versions
   
   For my old 4.4.x test branch, it looks like this:
   
   <img width="1394" height="1003" alt="grafik" 
src="https://github.com/user-attachments/assets/49340f15-d1c5-473e-8d66-08733997e700";
 />
   
   Observations:
   * PAX URL now used the 2.x version.
   * Some dependencies use new patch versions (hidden by a proposed update to 
next major release)
   * Some packages try to upgrade to a new minor version and we do not want 
this on 4.4.x. I think we have a trade-off here: either we block minor-versions 
as well, or we manually handle those proposed updates (checking for possible 
patch level upgrades, closing the ticket).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to