This is an automated email from the ASF dual-hosted git repository. mawiesne pushed a commit to branch OPENNLP-1690-Add-opennlp-tools-to-dependabot-excludes-of-addons/sandbox in repository https://gitbox.apache.org/repos/asf/opennlp-sandbox.git
commit 8cef0b5534da95e7dc1916a945a2d13f33ff52d6 Author: Martin Wiesner <[email protected]> AuthorDate: Wed Jan 22 09:44:18 2025 +0100 OPENNLP-1690: Add opennlp-tools to dependabot excludes of addons/sandbox --- .github/dependabot.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 19a3d75..8f6a22f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -22,6 +22,15 @@ updates: interval: weekly time: '04:00' open-pull-requests-limit: 10 + ignore: + # Update strategy for secondary project components (sandbox & addons) + # ------------------------------------------------------------------ + # The components' version should be aligned with primary components around 'opennlp-tools', + # that is, the SNAPSHOT version should match the current in-development version. + # Consequently, the opennlp-tools dependency can't be updated via dependabot and + # is thus excluded / ignored here, as additional (manual) steps are required. + - dependency-name: "org.apache.opennlp:opennlp-tools" + update-types: [ "version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch" ] - package-ecosystem: "github-actions" directory: "/"
