Skip to content

Restrict JUnit dependencies to below version 6.x to maintain compatib…#4120

Merged
ppkarwasz merged 2 commits into
apache:2.xfrom
ramanathan1504:dependabot-junit6-ignore
May 10, 2026
Merged

Restrict JUnit dependencies to below version 6.x to maintain compatib…#4120
ppkarwasz merged 2 commits into
apache:2.xfrom
ramanathan1504:dependabot-junit6-ignore

Conversation

@ramanathan1504
Copy link
Copy Markdown
Contributor

Related update for Fixes #4109

Add Dependabot ignore rules for JUnit 6+ updates

This PR updates .github/dependabot.yaml to prevent Dependabot from proposing JUnit 6 and above upgrades.

What changed

Added ignore rules for:

  • org.junit:junit-bom with versions: [ "[6,)" ]
  • org.junit.jupiter:* with versions: [ "[6,)" ]
  • org.junit.platform:* with versions: [ "[6,)" ]
  • org.junit.vintage:* with versions: [ "[6,)" ]

Applied for existing Maven update entries (2.x and main target branches).

How I tested

  1. Triggered/ran Dependabot update after config change.
  2. Reviewed the generated Dependabot PR(s), especially Files changed.
  3. Checked dependency changes in pom.xml and related files.

Test result

  • No JUnit dependency was upgraded to 6.x.
  • Dependabot PR did not include JUnit 6+ bumps.
  • This confirms the ignore rules are working as expected.

Comment thread .github/dependabot.yaml Outdated
Copy link
Copy Markdown
Member

@ppkarwasz ppkarwasz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@ppkarwasz ppkarwasz merged commit 75d7cf9 into apache:2.x May 10, 2026
10 checks passed
@github-project-automation github-project-automation Bot moved this from Approved to Merged in Log4j pull request tracker May 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

2 participants