This is an automated email from the ASF dual-hosted git repository.
mridulpathak pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push:
new d353c6180a Improved: Allow Dependabot major-version updates for Gradle
dependencies on trunk (OFBIZ-13716)
d353c6180a is described below
commit d353c6180ac2a05f19d2957e53089d27beaaf017
Author: Mridul Pathak <[email protected]>
AuthorDate: Thu Oct 22 23:20:01 2026 +0530
Improved: Allow Dependabot major-version updates for Gradle dependencies on
trunk (OFBIZ-13716)
Removed the semver-major ignore from the trunk gradle entry of the
Dependabot configuration, so that major versions are proposed and triaged one
by one, as agreed on dev@. Added explicit ignores for the asciidoctor plugins,
whose 5.x release renamed the convert plugin, and for activiti-juel-jakarta
9.x, which needs Java 25. The release24.09 entry keeps ignoring major versions.
---
.github/dependabot.yml | 15 ++++++++++++---
1 file changed, 12 insertions(+), 3 deletions(-)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f4d2412140..0b3a054450 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -38,9 +38,18 @@ updates:
- "minor"
- "patch"
ignore:
- - dependency-name: "*"
- update-types:
- - "version-update:semver-major"
+ # The asciidoctor plugins are kept on 4.x (see build.gradle). 5.x renamed
+ # org.asciidoctor.jvm.convert to org.asciidoctor.jvm, so only the pdf
+ # plugin would get a 5.x pull request, which would leave the pair on
+ # different versions.
+ - dependency-name: "org.asciidoctor.jvm.convert"
+ versions: [">= 5"]
+ - dependency-name: "org.asciidoctor.jvm.pdf"
+ versions: [">= 5"]
+ # activiti-juel-jakarta 9.0.0 is compiled for Java 25, above our Java 17
+ # baseline.
+ - dependency-name: "org.activiti:activiti-juel-jakarta"
+ versions: [">= 9"]
- package-ecosystem: "gradle"
directory: "/"
