You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: .github/dependabot.yml
+5-6Lines changed: 5 additions & 6 deletions
Original file line number
Diff line number
Diff line change
@@ -11,6 +11,11 @@ updates:
11
11
labels:
12
12
- "type/dependencies"
13
13
- "scope/backend"
14
+
ignore:
15
+
# Disable dependabot pull requests for Netty
16
+
# In general, our Netty references are temporary overrides, usually applied to address transitive Spring vulnerabilities, and should be configured with caution
17
+
# In general, having conflicting Netty versions in the classpath is not recommended
18
+
- dependency-name: "io.netty:*"
14
19
groups:
15
20
spring-boot-dependencies:
16
21
patterns:
@@ -23,16 +28,10 @@ updates:
23
28
exclude-patterns:
24
29
- "org.springframework.boot:*"
25
30
- "io.spring.dependency-management"
26
-
# All netty references are temporary overwrites that must be set carefully
27
-
# We do not need dependabot to send pull requests
28
-
- "io.netty:*"
29
31
other-dependencies:
30
32
exclude-patterns:
31
33
- "org.springframework.boot:*"
32
34
- "io.spring.dependency-management"
33
-
# All netty references are temporary overwrites that must be set carefully
0 commit comments