diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 61e3a48b..5a69f07e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -13,6 +13,9 @@ updates: - dependency-name: "com.puppycrawl.tools:checkstyle" # Newer versions have issues, see #1909 and #2050 - dependency-name: "jline:jline" + # Needs to be synchronised with maven-resolver-provider dependencies + - dependency-name: "org.apache.maven.resolver:maven-resolver-connector-basic" + - dependency-name: "org.apache.maven.resolver:maven-resolver-transport-http" # Used with maven-resolver dependencies; 2.0 update breaks other providers - dependency-name: "org.slf4j:slf4j-api" update-types: ["version-update:semver-major"] diff --git a/api/pom.xml b/api/pom.xml index 6a10ce3a..52e81e04 100644 --- a/api/pom.xml +++ b/api/pom.xml @@ -58,14 +58,14 @@ org.apache.maven.resolver maven-resolver-connector-basic - 1.9.8 + 1.9.7 provided org.apache.maven.resolver maven-resolver-transport-http - 1.9.8 + 1.9.7 provided diff --git a/proxy/pom.xml b/proxy/pom.xml index f6632e4a..c6004000 100644 --- a/proxy/pom.xml +++ b/proxy/pom.xml @@ -109,13 +109,13 @@ org.apache.maven.resolver maven-resolver-connector-basic - 1.9.8 + 1.9.7 runtime org.apache.maven.resolver maven-resolver-transport-http - 1.9.8 + 1.9.7 runtime