This is an automated email from the ASF dual-hosted git repository.

vy pushed a commit to branch fix/2.x/spotbugs-11
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git

commit 9d4fb4544bf5cf886a4cf5bc4195558fb0288482
Author: Volkan Yazıcı <[email protected]>
AuthorDate: Fri Jun 20 11:30:22 2025 +0200

    Pin `spotbugs-annotations` version to `4.8.6`, last release supporting Java 
8
---
 .github/dependabot.yaml | 3 +++
 log4j-parent/pom.xml    | 3 ++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 6c73c48d8d..5e7fa1e63c 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -90,6 +90,9 @@ updates:
     registries:
       - maven-central
     ignore:
+      # `com.github.spotbugs:spotbugs-annotations:4.9.0` and onwards require 
Java 11
+      - dependency-name: "com.github.spotbugs:spotbugs-annotations"
+        versions: [ "[4.9.0,)" ]
       # Jetty 10.x does not have an internal logging API
       - dependency-name: "org.eclipse.jetty:*"
         versions: [ "[10,)" ]
diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 33c3c9ac70..c1e38a9231 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -130,7 +130,8 @@
     
<osgi.annotation.versioning.version>1.1.2</osgi.annotation.versioning.version>
     <pax-exam.version>4.14.0</pax-exam.version>
     <plexus-utils.version>3.6.0</plexus-utils.version>
-    <spotbugs-annotations.version>4.9.3</spotbugs-annotations.version>
+    <!-- `com.github.spotbugs:spotbugs-annotations:4.9.0` and onwards require 
Java 11: -->
+    <spotbugs-annotations.version>4.8.6</spotbugs-annotations.version>
     <spring-boot.version>2.7.18</spring-boot.version>
     <spring-framework.version>5.3.39</spring-framework.version>
     <system-stubs.version>2.0.3</system-stubs.version>

Reply via email to