This is an automated email from the ASF dual-hosted git repository. ramanathan1504 pushed a commit to branch graalvm-dependabot-fix in repository https://gitbox.apache.org/repos/asf/logging-log4j-samples.git
commit d946314e30ada7eee46a681f17dd6c535bf78be2 Author: Ramanathan <[email protected]> AuthorDate: Wed Sep 9 19:49:44 2026 +0530 Refactor Dependabot configuration to separate log4j-samples projects and ensure correct version resolution --- .github/dependabot.yaml | 27 ++++++++++++++++++++++++--- 1 file changed, 24 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index c2848de..fc42695 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -25,10 +25,14 @@ registries: url: https://repo.maven.apache.org/maven2 updates: + # `org.apache.logging.log4j.samples:log4j-samples` (the `/` reactor) and + # `org.apache.logging.log4j.samples:log4j-samples-graalvm` are separate Maven projects that each + # declare `<version>${revision}</version>` against their own `<revision>0.0.0-SNAPSHOT</revision>`. + # Under a single `directories:` Dependabot resolves `${revision}` across both and rewrites the + # wrong `<version>` element: #426 replaced the reactor's own version with `2.26.1` and broke all + # 12 modules. Keep one entry per project. - package-ecosystem: maven - directories: - - "/" - - "log4j-samples-graalvm" + directory: "/" schedule: interval: weekly cooldown: @@ -57,6 +61,23 @@ updates: - dependency-name: "org.springframework.cloud:spring-cloud-dependencies" versions: ["[2025.1,)"] + - package-ecosystem: maven + directory: "log4j-samples-graalvm" + schedule: + interval: weekly + cooldown: + default-days: 7 + groups: + maven-minor-updates-graalvm: + update-types: + - "minor" + - "patch" + registries: + - maven-central + ignore: + - dependency-name: "org.apache.logging.log4j:*" + versions: ["[3.0.0-alpha1,)"] + - package-ecosystem: gradle directories: - "/"
