Bump spring-core version, ignore 6.x in Dependabot updates (#2657)

mozilla · Oct 22, 2024 · 0ab2ea1 · 0ab2ea1
1 parent 50925a1
commit 0ab2ea1
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -6,6 +6,9 @@ updates:
   - dependency-name: com.google.cloud:libraries-bom
   - dependency-name: com.fasterxml.jackson:jackson-bom
   - dependency-name: org.apache.avro:avro
+  - dependency-name: org.springframework:spring-core
+    # Spring 6 requires Java 17
+    versions: [">=6.0.0"]
   schedule:
     interval: daily
   reviewers:

diff --git a/ingestion-beam/pom.xml b/ingestion-beam/pom.xml
@@ -104,7 +104,7 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-core</artifactId>
-            <version>5.3.29</version>
+            <version>5.3.39</version>
             <scope>test</scope>
         </dependency>
         <dependency>