diff --git a/.github/dependabot.yml b/.github/dependabot.yml index fafe8d38..59fcfd2d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -21,6 +21,19 @@ updates: maven-minor-patch: patterns: ["*"] update-types: ["minor", "patch"] + ignore: + # jackson-bom 2.22.0 ships ahead of its module jars: jackson-core-2.22.0.jar + # returns 404 on repo1.maven.org (Sonatype partial-sync window). Block this + # exact release so the grouped PR is buildable. Drop this entry once + # jackson-bom >= 2.22.1 (or 2.23.0) lands on Central with full module sync. + - dependency-name: "com.fasterxml.jackson:jackson-bom" + versions: ["2.22.0"] + # central-publishing-maven-plugin 0.10.0 is a 3-minor jump (0.7 → 0.10) on + # the plugin that publishes Maven Central artefacts (the v1.6.6 release + # used 0.7.0). Block this version until the release profile is validated + # against 0.10.x in a focused PR; remove this entry once that work lands. + - dependency-name: "org.sonatype.central:central-publishing-maven-plugin" + versions: ["0.10.0"] - package-ecosystem: github-actions directory: "/"