Signal/Signal-Server
1
0
Fork 0
mirror of https://github.com/signalapp/Signal-Server synced 2026-08-30 23:34:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

Reorganize ignore in dependabot.yml

Browse Source
This commit is contained in:
Chris Eager
2026-08-25 11:27:31 -04:00
committed by Chris Eager
parent f04e716347
commit 0cabb53aed
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/dependabot.yml
+6 -4
View File
@@ -19,17 +19,19 @@ updates:
update-types:
- version-update:semver-major
- version-update:semver-minor
# Temporary exclusions, pending upstream fixes
# https://github.com/dropwizard/dropwizard/pull/11273
- dependency-name: "ch.qos.logback:*"
versions: [">=1.6.0"]
# this dependency monitors convergence conflicts, so we pin a specific version
- dependency-name: "tools.jackson.core:jackson-databind"
# this dependency monitors convergence conflicts, so we pin a specific version
- dependency-name: "com.squareup.okio:okio-jvm"
# https://github.com/jetty/jetty.project/issues/15657
- dependency-name: "org.eclipse.jetty:*"
versions: ["<=12.1.12"]
# Dependency convergence sentinels, pinned to specific versions
- dependency-name: "tools.jackson.core:jackson-databind"
- dependency-name: "com.squareup.okio:okio-jvm"
groups:
minor-java-dependencies:
# Java: Only group minor and patch updates (we want to carefully review major updates)