Files
openhab-addons/.github/dependabot.yml
T
Holger FriedrichandGitHub 3139e9d23a [snmp] Upgrade to snmp4j 3.10.0 (#20835)
* [snmp] Upgrade to snmp4j 3.10.0

* Upgrade snmp4j from 3.8.2 to 3.10.0
* Fix deperectation warnings about ResponseEvent
* Fix warnings about raw types
* Activate dependabot upgrades

Signed-off-by: Holger Friedrich <mail@holger-friedrich.de>
2026-06-01 22:01:21 +02:00

62 lines
2.6 KiB
YAML

# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference
version: 2
# this would enable querying all packages from our repo first,
# disabled for now as we do not want to use it. Kept for reference.
#registries:
# openhab-jfrog:
# type: "maven-repository"
# url: "https://openhab.jfrog.io/artifactory/libs-all/"
updates:
- package-ecosystem: "github-actions" # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
interval: "weekly"
open-pull-requests-limit: 10
labels:
- dependencies
- package-ecosystem: "maven" # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
interval: "weekly"
open-pull-requests-limit: 15
labels:
- dependencies
groups:
jacoco:
patterns:
- "*jacoco*"
ftpupload:
patterns:
- "org.apache.ftpserver:*"
- "*mina-core*"
snmp4j:
patterns:
- "org.snmp4j:snmp4j*"
allow:
- dependency-name: "org.apache.maven.plugins:*"
- dependency-name: "org.codehaus.mojo:*"
- dependency-name: "org.codehaus.plexus:plexus-compiler-eclipse"
- dependency-name: "*jacoco*" # code coverage tool, both tool and plugin
- dependency-name: "*plugin*"
- dependency-name: "org.eclipse.jdt:ecj" # eclipse compiler
- dependency-name: "org.apache.ftpserver:*" # ftpserver
- dependency-name: "org.apache.mina:mina-core" # ftpserver
- dependency-name: "org.jsoup:jsoup" # parser used by several bundles, e.g. jinja transformation
- dependency-name: "org.rrd4j:rrd4j" # rrd4j persistence
- dependency-name: "org.snmp4j:snmp4j*" # snmp4j and snmp4j-unix-transport
- dependency-name: "org.wiremock:wiremock*" # used for testing
ignore:
- dependency-name: "com.github.jaxb-xew-plugin:jaxb-xew-plugin" # updated with core
- dependency-name: "com.diffplug.spotless:spotless-maven-plugin" # updated together with SAT
- dependency-name: "*graalvm*" # do not touch graalvm related stuff
- dependency-name: "org.openapitools:openapi*" # updated togeter with openapi generator
- dependency-name: "org.apache.openjpa:openjpa*" # should be done with openjpa upgrades"
- dependency-name: "org.apache.karaf.*" # Karaf updates are done manually