From 3e2898675b4c3864cc1db95f7371bb01c1366041 Mon Sep 17 00:00:00 2001 From: Ramanathan Date: Tue, 8 Sep 2026 16:13:00 +0530 Subject: [PATCH] Ignore Spring Boot 4 and the Spring Cloud 2025.1 release train --- .github/dependabot.yaml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index c866c50..c2848de 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -43,6 +43,19 @@ updates: ignore: - dependency-name: "org.apache.logging.log4j:*" versions: ["[3.0.0-alpha1,)"] + # `org.springframework.boot:spring-boot-dependencies:4.x` is the Spring Boot 4 generation. + # `log4j-spring-cloud-config-sample-application` depends on + # `org.apache.logging.log4j:log4j-spring-cloud-config-client:2.26.1`, which is built against + # `org.springframework.cloud:spring-cloud-context:4.3.0` — Spring Boot 3. + - dependency-name: "org.springframework.boot:*" + versions: ["[4,)"] + # `org.springframework.cloud:spring-cloud-dependencies:2025.1.3` is the Spring Boot 4 release + # train, paired with `spring-boot-dependencies:4.x`. It resolves + # `org.springframework.cloud:spring-cloud-starter-bus-amqp:5.0.3`, which needs + # `org.springframework.amqp:spring-rabbit:4.0.5` while `spring-boot-dependencies:3.5.7` + # manages that down to `3.2.8`, so `enforce-upper-bound-deps` fails. + - dependency-name: "org.springframework.cloud:spring-cloud-dependencies" + versions: ["[2025.1,)"] - package-ecosystem: gradle directories: