diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c5950d00..afcfa66e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -13,9 +13,10 @@ updates: - dependency-name: "com.puppycrawl.tools:checkstyle" # Newer versions have issues, see #1909 and #2050 - dependency-name: "jline:jline" - # Needs to be synchronised with maven-resolver-provider dependencies + # Later versions of these Maven dependencies are incompatible and require careful management - see SPIGOT-7400 - dependency-name: "org.apache.maven.resolver:maven-resolver-connector-basic" - dependency-name: "org.apache.maven.resolver:maven-resolver-transport-http" + - dependency-name: "org.apache.maven:maven-resolver-provider" # Used with maven-resolver dependencies; 2.0 update breaks other providers - dependency-name: "org.slf4j:slf4j-api" update-types: ["version-update:semver-major"] diff --git a/api/pom.xml b/api/pom.xml index 67e0673d..a6e14dea 100644 --- a/api/pom.xml +++ b/api/pom.xml @@ -51,21 +51,21 @@ org.apache.maven maven-resolver-provider - 3.9.2 + 3.8.5 provided org.apache.maven.resolver maven-resolver-connector-basic - 1.9.10 + 1.7.3 provided org.apache.maven.resolver maven-resolver-transport-http - 1.9.10 + 1.7.3 provided diff --git a/proxy/pom.xml b/proxy/pom.xml index a783a605..faeae901 100644 --- a/proxy/pom.xml +++ b/proxy/pom.xml @@ -103,19 +103,19 @@ org.apache.maven maven-resolver-provider - 3.9.2 + 3.8.5 runtime org.apache.maven.resolver maven-resolver-connector-basic - 1.9.10 + 1.7.3 runtime org.apache.maven.resolver maven-resolver-transport-http - 1.9.10 + 1.7.3 runtime