# GitHub Dependabot configuration file

version: 2
updates:

  # Maintain dependencies for GitHub Actions
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"

  # Maintain dependencies for maven
  - package-ecosystem: "maven"
    directory: "/"
    schedule:
      interval: "daily"
    open-pull-requests-limit: 20
    ignore:
      - dependency-name: "biz.aQute.bnd:biz.aQute.bndlib"
        versions:
          - ">=7.0.0" # does not support java 8
      - dependency-name: "biz.aQute.bnd:bnd-indexer-maven-plugin"
        versions:
          - ">=7.0.0" # does not support java 8
      - dependency-name: "biz.aQute.bnd:bnd-maven-plugin"
        versions:
          - ">=7.0.0" # does not support java 8
      - dependency-name: "jakarta.annotation:jakarta.annotation-api"
        versions:
          - ">=3.0.0" # does not support java 8
      - dependency-name: "jakarta.enterprise:jakarta.enterprise.cdi-api"
        versions:
          - ">=4.0.0" # does not support java 8
      - dependency-name: "jakarta.persistence:jakarta.persistence-api"
        versions:
          - ">3.0.0" # does not support java 8
      - dependency-name: "jakarta.servlet:jakarta.servlet-api"
        versions:
          - ">=5.0.0" # does not provide javax.servlet package necessary for pax-web 8.x
      - dependency-name: "javax.enterprise:cdi-api"
        versions:
          - ">2.0.SP1" # 2.0-PFD2 is considered as newer, but is older
      - dependency-name: "org.apache.derby:derby"
        versions:
          - ">=10.15.0" # does not support java 8
      - dependency-name: "org.apache.felix:maven-bundle-plugin"
        versions:
          - ">=6.0.0" # does not support java 8
      - dependency-name: "org.apache.geronimo.components:geronimo-connector"
        versions:
          - ">=4.0.0" # does not support java 8
      - dependency-name: "org.apache.groovy:groovy-xml"
        versions:
          - ">=5.0.0" # does not support java 8
      - dependency-name: "org.apache.openjpa:openjpa"
        versions:
          - ">=4.0.0" # does not support java 8
      - dependency-name: "org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-*"
        versions:
          - ">=6.0.0" # does not support java 8
      - dependency-name: "org.codehaus.plexus:plexus-xml*"
        versions:
          - ">=4.1.0" # does not support java 8
      - dependency-name: "org.mockito:mockito*"
        versions:
          - ">=5.0.0" # does not support java 8
      - dependency-name: "org.ops4j.pax.cdi:pax-cdi*"
        versions:
          - ">=1.0.0" # pax-cdi is only used in blueprint maven plugin as an optional annotation provider and it's changed in version 1.x in incompatible way - blueprint-maven-plugin-annotation should be used instead since provides annotations more focused on blueprint elements
      - dependency-name: "org.ops4j.pax.exam:pax-exam*"
        versions:
          - ">=4.14.0" # does not support java 8
      - dependency-name: "org.ops4j.pax.logging:pax-logging*"
        versions:
          - ">=2.3.0" # does not support java 8
      - dependency-name: "org.ops4j.pax.tinybundles:tinybundles*"
        versions:
          # 4.x changes in incompatible way, needs pax-exam >= 4.14.x
          # 3.x cannot be used by pax-exam 4.13.5
          - ">=3.0.0"
      - dependency-name: "org.ops4j.pax.url:pax-url*"
        versions:
          - ">=3.0.0" # does not support java 8
      - dependency-name: "org.ops4j.pax.web:pax-web*"
        versions:
          - ">=9.0.0" # does not support java 8
      - dependency-name: "org.ops4j.pax.swissbox:pax-swissbox*"
        versions:
          - ">1.8.3" # 1.9.0 does not support java 8, but 1.8.4 has SLF4j dependency which cannot be met https://github.com/ops4j/org.ops4j.pax.exam/issues/1056
      - dependency-name: "org.springframework:spring-*"
        versions:
          - ">=6.0.0" # does not support java 8