Clean up plexus-utils and plexus-xml dependencies (#113)

jenkinsci · Sep 10, 2024 · afed8df · afed8df
1 parent db7782f
commit afed8df
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -10,8 +10,9 @@ updates:
     ignore:
       # maven core artifacts are provided by the running maven, do not update to prevent consuming something unavailable
       - dependency-name: "org.apache.maven:*"
-      # https://lists.apache.org/thread/ltd1g1dbv0lqqdw5q941gmrkfyn6m87m
-      - dependency-name: "org.codehaus.plexus:plexus-utils"
+      # Per https://codehaus-plexus.github.io/plexus-utils/ pin plexus-xml to 3
+      # for Maven 3 compatibility, as plexus-xml 4 works only in Maven 4.
+      - dependency-name: "org.codehaus.plexus:plexus-xml"
         versions: [">=4.0.0"]
   - package-ecosystem: github-actions
     directory: /

diff --git a/pom.xml b/pom.xml
@@ -104,7 +104,12 @@
       <dependency>
         <groupId>org.codehaus.plexus</groupId>
         <artifactId>plexus-utils</artifactId>
-        <version>3.5.1</version>
+        <version>4.0.1</version>
+      </dependency>
+      <dependency>
+        <groupId>org.codehaus.plexus</groupId>
+        <artifactId>plexus-xml</artifactId>
+        <version>3.0.1</version>
       </dependency>
     </dependencies>
   </dependencyManagement>