From 99478e1e5ede730ea5ef0a4747e9de80cc4a33b0 Mon Sep 17 00:00:00 2001 From: cuioss oliver <23139298+cuioss@users.noreply.github.com> Date: Tue, 6 Oct 2026 09:45:21 +0200 Subject: [PATCH] fix(build): pin Maven wrapper to 3.9.16 and block 3.10.x via Dependabot With Maven 3.10.0 the Sonatype Central Portal rejects the release bundle ("Deployment ... failed while publishing"). Stay on 3.9.x until https://github.com/mavenplugins/central-publishing-maven-plugin/issues/78 is resolved. Same fix as cuioss/cui-http#270. Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_01T8UQ4njhevXtBkvibCztW7 --- .github/dependabot.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c110fa5..1dcc8dd 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -14,3 +14,10 @@ updates: semver-major-days: 7 semver-minor-days: 3 semver-patch-days: 1 + ignore: + # Maven 3.10.0 produces a Central bundle that the Central Portal rejects for modules + # excluded from publishing (it failed the cui-http 3.2 release, cuioss/cui-http#270). Stay on + # 3.9.x until https://github.com/mavenplugins/central-publishing-maven-plugin/issues/78 + # is resolved. + - dependency-name: "org.apache.maven:apache-maven" + versions: [">= 3.10.0"]