This is an automated email from the ASF dual-hosted git repository.

mawiesne pushed a commit to branch 
OPENNLP-1690-Add-opennlp-tools-to-dependabot-excludes-of-addons/sandbox
in repository https://gitbox.apache.org/repos/asf/opennlp-addons.git

commit 92970792e978bb91724a48a3b82b43e10f398dc1
Author: Martin Wiesner <[email protected]>
AuthorDate: Wed Jan 22 09:47:38 2025 +0100

    OPENNLP-1690: Add opennlp-tools to dependabot excludes of addons/sandbox
---
 .github/dependabot.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 19a3d75..8f6a22f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -22,6 +22,15 @@ updates:
       interval: weekly
       time: '04:00'
     open-pull-requests-limit: 10
+    ignore:
+        # Update strategy for secondary project components (sandbox & addons)
+        # ------------------------------------------------------------------
+        # The components' version should be aligned with primary components 
around 'opennlp-tools',
+        # that is, the SNAPSHOT version should match the current 
in-development version.
+        # Consequently, the opennlp-tools dependency can't be updated via 
dependabot and
+        # is thus excluded / ignored here, as additional (manual) steps are 
required.
+      - dependency-name: "org.apache.opennlp:opennlp-tools"
+        update-types: [ "version-update:semver-major", 
"version-update:semver-minor", "version-update:semver-patch" ]
 
   - package-ecosystem: "github-actions"
     directory: "/"

Reply via email to