diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0acc664c4..138374423 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,8 +16,11 @@ updates: # https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown- exclude: - "org.jboss.da:*" - - "org.jboss.pnc*:*" # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz - - "org.commonjava*:*" # match org.commonjava:xyz and org.commonjava.group:xyz + - "org.jboss.pnc*:*" # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz + - "org.commonjava*:*" # match org.commonjava:xyz and org.commonjava.group:xyz + ignore: + - dependency-name: "org.commonjava.cdi.util:weft" + update-types: ["version-update:semver-major"] - package-ecosystem: "github-actions" # Also update Github actions directory: "/" schedule: