From 3d9aff54e89f2655b84b75634cacf6cadb57c182 Mon Sep 17 00:00:00 2001 From: Kevin Wittek Date: Sun, 18 Oct 2026 22:24:34 +0200 Subject: [PATCH] Ignore jackson-databind minor/patch updates in core Dependabot config core forces jackson-databind and jackson-datatype-jsr310 to the same version on purpose. Only jsr310 was ignored, so Dependabot bumped databind alone, breaking the version alignment and the shaded jar's META-INF assertions in JarFileShadingTest. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c668168cff8..931480bac26 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -43,6 +43,8 @@ updates: update-types: ["version-update:semver-major"] - dependency-name: "org.mockito:mockito-core" update-types: ["version-update:semver-major"] + - dependency-name: "com.fasterxml.jackson.core:jackson-databind" + update-types: ["version-update:semver-minor", "version-update:semver-patch"] - dependency-name: "com.fasterxml.jackson.datatype:jackson-datatype-jsr310" update-types: ["version-update:semver-minor", "version-update:semver-patch"] - dependency-name: "org.junit.jupiter:junit-jupiter"