[hibernate/hibernate-orm] ceced2: Enable dependabot for most dependencies
by Yoann Rodière
Branch: refs/heads/main
Home: https://github.com/hibernate/hibernate-orm
Commit: ceced2409563799b195d69f1980ba16539cafac8
https://github.com/hibernate/hibernate-orm/commit/ceced2409563799b195d69f...
Author: Yoann Rodière <yoann(a)hibernate.org>
Date: 2025-06-23 (Mon, 23 Jun 2025)
Changed paths:
M .github/dependabot.yml
M .github/hibernate-github-bot.yml
M .github/workflows/ci.yml
Log Message:
-----------
Enable dependabot for most dependencies
The idea is that we'd merge updates in the "build-dependencies" group as-is, without a Jira issue.
**We would still have to adjust/re-create other update PRs** (such as Jandex) to assign them a Jira issue. We could consider limiting the dependencies covered by dependabot, but I find that grouping, at least, allows a fairly manageable rate of dependabot PRs. Runtime dependency updates should be more rare anyway, as their number is limited and they're generally less active (e.g. Jakarta Persistence doesn't release a micro every week).
The most important ones are the runtime ones, e.g. bytebuddy,
so we could consider ignoring/limiting build dependency updates if
necessary.
To unsubscribe from these emails, change your notification settings at https://github.com/hibernate/hibernate-orm/settings/notifications
3 months
[hibernate/hibernate-search] f1d5e9: Bump version.org.apache.lucene from 9.12.2 to 10.2.2
by dependabot[bot]
Branch: refs/heads/dependabot/maven/version.org.apache.lucene-10.2.2
Home: https://github.com/hibernate/hibernate-search
Commit: f1d5e90bd7db9ca8986a4e569a1a5f9368f4a9cf
https://github.com/hibernate/hibernate-search/commit/f1d5e90bd7db9ca8986a...
Author: dependabot[bot] <49699333+dependabot[bot](a)users.noreply.github.com>
Date: 2025-06-23 (Mon, 23 Jun 2025)
Changed paths:
M build/parents/build/pom.xml
Log Message:
-----------
Bump version.org.apache.lucene from 9.12.2 to 10.2.2
Bumps `version.org.apache.lucene` from 9.12.2 to 10.2.2.
Updates `org.apache.lucene:lucene-core` from 9.12.2 to 10.2.2
Updates `org.apache.lucene:lucene-analysis-common` from 9.12.2 to 10.2.2
Updates `org.apache.lucene:lucene-queryparser` from 9.12.2 to 10.2.2
Updates `org.apache.lucene:lucene-join` from 9.12.2 to 10.2.2
Updates `org.apache.lucene:lucene-facet` from 9.12.2 to 10.2.2
Updates `org.apache.lucene:lucene-highlighter` from 9.12.2 to 10.2.2
---
updated-dependencies:
- dependency-name: org.apache.lucene:lucene-core
dependency-version: 10.2.2
dependency-type: direct:production
update-type: version-update:semver-major
- dependency-name: org.apache.lucene:lucene-analysis-common
dependency-version: 10.2.2
dependency-type: direct:production
update-type: version-update:semver-major
- dependency-name: org.apache.lucene:lucene-queryparser
dependency-version: 10.2.2
dependency-type: direct:production
update-type: version-update:semver-major
- dependency-name: org.apache.lucene:lucene-join
dependency-version: 10.2.2
dependency-type: direct:production
update-type: version-update:semver-major
- dependency-name: org.apache.lucene:lucene-facet
dependency-version: 10.2.2
dependency-type: direct:production
update-type: version-update:semver-major
- dependency-name: org.apache.lucene:lucene-highlighter
dependency-version: 10.2.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support(a)github.com>
To unsubscribe from these emails, change your notification settings at https://github.com/hibernate/hibernate-search/settings/notifications
3 months