This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven-resources-plugin.git
commit 7d7097419f58e42522ce2696b7634d176a1d9fe9 Author: Gerd Aschemann <[email protected]> AuthorDate: Tue Oct 27 08:36:15 2026 +0100 Cap Maven 3 core ignore at 3.10 (stay on 3.9 baseline) The ASF minimum-prerequisite decision (dev@, Nov 2025, documented in compatibility-plan.md) keeps plugins on the Maven 3.9 baseline. Lower the core-artifact ignore from 4.0.0 to 3.10.0 so Dependabot no longer offers the 3.10 bump; 3.10 would also pull in Resolver 2.x. The open mavenVersion 3.10 PRs auto-close on the next Dependabot run once this merges. Co-Authored-By: Claude Opus 4.8 <[email protected]> --- .github/dependabot.yml | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5611dc0..6d3ed58 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -33,15 +33,16 @@ updates: # Maven 3 so use SLF4J 1.7.x - dependency-name: "org.slf4j:*" versions: [">= 2.0.0"] - # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch). - # Scoped to the core artifacts this plugin actually uses, so other + # ASF plugins stay on the Maven 3.9 baseline (min-prerequisite + # decision, dev@ 2025-11; 3.10 would pull in Resolver 2.x). + # Scoped to the core artifacts this plugin uses; other # org.apache.maven:* artifacts with their own release line are untouched. - dependency-name: "org.apache.maven:maven-core" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - dependency-name: "org.apache.maven:maven-model" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - dependency-name: "org.apache.maven:maven-plugin-api" - versions: [">= 4.0.0"] + versions: [">= 3.10.0"] - package-ecosystem: "github-actions" directory: "/"
