druid/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: "maven"
    directory: "/"
    schedule:
      interval: "daily"
    ignore:
      - dependency-name: "com.google.guava:guava"
      # pin ZooKeeper dependencies to 3.5.x
      - dependency-name: "org.apache.zookeeper"
        versions: "[3.6,)"
      # pin Jetty dependencies to 9.4.x
      - dependency-name: "org.eclipse.jetty"
        versions: "[9.5,)"
      - dependency-name: "org.apache.hadoop"
enable dependabot for dependency updates (#11079) * enable dependabot for dependency updates * exclude dependabot config from license checks 2021-06-07 13:56:32 -07:00			`version: 2`
			`updates:`
			`- package-ecosystem: "maven"`
			`directory: "/"`
			`schedule:`
			`interval: "daily"`
			`ignore:`
			`- dependency-name: "com.google.guava:guava"`
pin ZooKeeper dependencies to 3.5.x (#11354) 2021-06-10 07:41:53 -07:00			`# pin ZooKeeper dependencies to 3.5.x`
			`- dependency-name: "org.apache.zookeeper"`
			`versions: "[3.6,)"`
Pin Jetty version to 9.4.x (#11453) Major version bumps in jetty are too scary for now. So let's keep up to date with the latest 9.4.x 2021-07-20 14:50:39 -07:00			`# pin Jetty dependencies to 9.4.x`
			`- dependency-name: "org.eclipse.jetty"`
			`versions: "[9.5,)"`
Lock hadoop dependencies to 2.8.5 (#11583) 2021-08-12 15:16:47 +05:30			`- dependency-name: "org.apache.hadoop"`