Skip to content

Stop the Maven runtime pin from freezing maven-archiver - #1364

Merged
slachiewicz merged 1 commit into
masterfrom
dependabot-unpin-maven-archiver
Aug 21, 2026
Merged

Stop the Maven runtime pin from freezing maven-archiver#1364
slachiewicz merged 1 commit into
masterfrom
dependabot-unpin-maven-archiver

Conversation

@slachiewicz

Copy link
Copy Markdown
Member

org.apache.maven:* matches that groupId exactly, and org.apache.maven:maven-archiver lives in it. It is a shared library carrying its own version, 3.6.4 here, not part of the ${mavenVersion} runtime pin — so the wildcard has been holding it back since 2022. Central is at 3.6.6.

The six runtime artifacts are now named individually and stay pinned at mavenVersion 3.6.3, which is what the rule was written for.

Part of a sweep across the thirteen repositories carrying this wildcard; see apache/maven-archiver#394.

This change was created with AI assistance.

The wildcard covered org.apache.maven:maven-archiver, which is a
library on its own version, not part of the runtime pin. Name the
runtime artifacts instead.
@slachiewicz
slachiewicz marked this pull request as ready for review August 21, 2026 16:00
@slachiewicz
slachiewicz merged commit 9102dbc into master Aug 21, 2026
6 of 8 checks passed
@slachiewicz
slachiewicz deleted the dependabot-unpin-maven-archiver branch August 21, 2026 16:00
@github-actions github-actions Bot added this to the 3.12.1 milestone Aug 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant