diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c5950d00..afcfa66e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -13,9 +13,10 @@ updates:
- dependency-name: "com.puppycrawl.tools:checkstyle"
# Newer versions have issues, see #1909 and #2050
- dependency-name: "jline:jline"
- # Needs to be synchronised with maven-resolver-provider dependencies
+ # Later versions of these Maven dependencies are incompatible and require careful management - see SPIGOT-7400
- dependency-name: "org.apache.maven.resolver:maven-resolver-connector-basic"
- dependency-name: "org.apache.maven.resolver:maven-resolver-transport-http"
+ - dependency-name: "org.apache.maven:maven-resolver-provider"
# Used with maven-resolver dependencies; 2.0 update breaks other providers
- dependency-name: "org.slf4j:slf4j-api"
update-types: ["version-update:semver-major"]
diff --git a/api/pom.xml b/api/pom.xml
index 67e0673d..a6e14dea 100644
--- a/api/pom.xml
+++ b/api/pom.xml
@@ -51,21 +51,21 @@
org.apache.maven
maven-resolver-provider
- 3.9.2
+ 3.8.5
provided
org.apache.maven.resolver
maven-resolver-connector-basic
- 1.9.10
+ 1.7.3
provided
org.apache.maven.resolver
maven-resolver-transport-http
- 1.9.10
+ 1.7.3
provided
diff --git a/proxy/pom.xml b/proxy/pom.xml
index a783a605..faeae901 100644
--- a/proxy/pom.xml
+++ b/proxy/pom.xml
@@ -103,19 +103,19 @@
org.apache.maven
maven-resolver-provider
- 3.9.2
+ 3.8.5
runtime
org.apache.maven.resolver
maven-resolver-connector-basic
- 1.9.10
+ 1.7.3
runtime
org.apache.maven.resolver
maven-resolver-transport-http
- 1.9.10
+ 1.7.3
runtime