From d3d34eae7758a590f6f9bee688d3e14cc9b6a91a Mon Sep 17 00:00:00 2001 From: Nick Cross Date: Fri, 18 Sep 2026 08:56:48 +0100 Subject: [PATCH] Prevent weft from major update --- .github/dependabot.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0acc664c4..138374423 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,8 +16,11 @@ updates: # https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown- exclude: - "org.jboss.da:*" - - "org.jboss.pnc*:*" # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz - - "org.commonjava*:*" # match org.commonjava:xyz and org.commonjava.group:xyz + - "org.jboss.pnc*:*" # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz + - "org.commonjava*:*" # match org.commonjava:xyz and org.commonjava.group:xyz + ignore: + - dependency-name: "org.commonjava.cdi.util:weft" + update-types: ["version-update:semver-major"] - package-ecosystem: "github-actions" # Also update Github actions directory: "/" schedule: