Exclude Maven dependencies from Dependabot configuration (#359)

jenkinsci · Oct 23, 2024 · 7a84e69 · 7a84e69
1 parent b1cb3a1
commit 7a84e69
Showing 1 changed file with 20 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -3,10 +3,29 @@
 version: 2
 updates:
   - package-ecosystem: "maven"
-    open-pull-requests-limit: 25
     directory: "/"
     schedule:
       interval: "weekly"
+    ignore:
+      # An upgrade of the Maven dependencies for this plugin would require
+      # significant build work and compatibility testing.
+      - dependency-name: "org.apache.maven:apache-maven"
+      - dependency-name: "org.apache.maven:maven-compat"
+      - dependency-name: "org.apache.maven:maven-core"
+      - dependency-name: "org.apache.maven:maven-embedder"
+      - dependency-name: "org.apache.maven:maven-repository-metadata"
+      - dependency-name: "org.apache.maven:maven-resolver-provider"
+      - dependency-name: "org.apache.maven.reporting:maven-reporting-api"
+      - dependency-name: "org.apache.maven.resolver:maven-resolver-api"
+      - dependency-name: "org.apache.maven.resolver:maven-resolver-connector-basic"
+      - dependency-name: "org.apache.maven.resolver:maven-resolver-impl"
+      - dependency-name: "org.apache.maven.resolver:maven-resolver-spi"
+      - dependency-name: "org.apache.maven.resolver:maven-resolver-transport-wagon"
+      - dependency-name: "org.apache.maven.resolver:maven-resolver-util"
+      - dependency-name: "org.codehaus.plexus:plexus-cipher"
+      - dependency-name: "org.codehaus.plexus:plexus-classworlds"
+      - dependency-name: "org.codehaus.plexus:plexus-component-annotations"
+      - dependency-name: "org.codehaus.plexus:plexus-utils"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: