From 24e113d8893c14d146c30f8fb6cd314c43158c39 Mon Sep 17 00:00:00 2001 From: cuioss oliver <23139298+cuioss@users.noreply.github.com> Date: Tue, 6 Oct 2026 09:44:46 +0200 Subject: [PATCH] fix(build): pin Maven wrapper to 3.9.16 and block 3.10.x via Dependabot With Maven 3.10.0 the Sonatype Central Portal rejects the release bundle ("Deployment ... failed while publishing"). Stay on 3.9.x until https://github.com/mavenplugins/central-publishing-maven-plugin/issues/78 is resolved. Same fix as cuioss/cui-http#270. Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_01T8UQ4njhevXtBkvibCztW7 --- .github/dependabot.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0b99d74..b08c0e4 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -14,6 +14,13 @@ updates: semver-major-days: 7 semver-minor-days: 3 semver-patch-days: 1 + ignore: + # Maven 3.10.0 produces a Central bundle that the Central Portal rejects for modules + # excluded from publishing (it failed the cui-http 3.2 release, cuioss/cui-http#270). Stay on + # 3.9.x until https://github.com/mavenplugins/central-publishing-maven-plugin/issues/78 + # is resolved. + - dependency-name: "org.apache.maven:apache-maven" + versions: [">= 3.10.0"] - package-ecosystem: "github-actions" directory: "/" schedule: