.github/dependabot.yml

#
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
version: 2
# Add Maven Central explicitly to work around:
#   https://github.com/dependabot/dependabot-core/issues/8329
registries:
  maven-central:
    type: maven-repository
    url: https://repo.maven.apache.org/maven2

updates:
- package-ecosystem: maven
  directory: "/"
  schedule:
    interval: "daily"
  target-branch: "master"
  registries:
    - maven-central
  ignore:
    # EclipseLink 3.x is Jakarta EE 9
    - dependency-name: "org.eclipse.persistence:*"
      versions: "[3, )"
    # Spring Boot 3.x is Jakarta EE 9
    - dependency-name: "org.springframework.boot:*"
      versions: "[3, )"
    # The EclipseLink Maven plugin version 3.x requires Java 17
    - dependency-name: "com.ethlo.persistence.tools:*"
      versions: "[3, )"
    # SpringFox 3.x needs a code update
    - dependency-name: "io.springfox:*"
      versions: "[3, )"

- package-ecosystem: github-actions
  directory: "/"
  schedule:
    interval: "daily"
  target-branch: "master"