Skip to content

[3.1] dependabot updates #2440

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Aug 13, 2025
Merged

[3.1] dependabot updates #2440

merged 4 commits into from
Aug 13, 2025

Conversation

dependabot bot and others added 4 commits August 12, 2025 16:40
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.3 to 3.27.4.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.3...assertj-build-3.27.4)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the hibernate group with 1 update: [org.hibernate.validator:hibernate-validator](https://github.com/hibernate/hibernate-validator).


Updates `org.hibernate.validator:hibernate-validator` from 8.0.2.Final to 8.0.3.Final
- [Changelog](https://github.com/hibernate/hibernate-validator/blob/8.0.3.Final/changelog.txt)
- [Commits](hibernate/hibernate-validator@8.0.2.Final...8.0.3.Final)

---
updated-dependencies:
- dependency-name: org.hibernate.validator:hibernate-validator
  dependency-version: 8.0.3.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: hibernate
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the testcontainers group with 1 update: [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j).

Updates `org.mariadb.jdbc:mariadb-java-client` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases)
- [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md)
- [Commits](mariadb-corporation/mariadb-connector-j@3.5.4...3.5.5)

---
updated-dependencies:
- dependency-name: org.mariadb.jdbc:mariadb-java-client
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testcontainers
...

Signed-off-by: dependabot[bot] <[email protected]>
@DavideD DavideD added this to the 3.1.1.Final milestone Aug 12, 2025
@DavideD DavideD added testing Improvements to test suite dependencies Pull requests that update a dependency file 3.1 labels Aug 12, 2025
@DavideD DavideD merged commit 6cb99d9 into hibernate:3.1 Aug 13, 2025
17 checks passed
@marko-bekhta
Copy link
Member

Hey @DavideD

Just in case.. it turns out that dependabot can also open PRs for non-main branches too, you just need to add another config for the different target-branch, here's an example from Quarkus:

https://github.com/quarkusio/quarkus/blob/91590b5dc63b5f6492c254b5e7dccec73bbf4a39/.github/dependabot.yml#L249-L277

@DavideD
Copy link
Member Author

DavideD commented Aug 13, 2025

Ah, thanks.

@DavideD
Copy link
Member Author

DavideD commented Aug 13, 2025

Basically, I need to duplicate the package ecosystem for each branch, right?

@marko-bekhta
Copy link
Member

Yes, that should do it, and you only need to have that config in the main branch (dependabot reads it from it)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3.1 dependencies Pull requests that update a dependency file testing Improvements to test suite
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants