# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

version: 2
updates:
  - package-ecosystem: "maven"
    directory: "/java"
    schedule:
      interval: "weekly"
    ignore:
      # Pin gson to 2.2.4 because of Hive
      - dependency-name: "com.google.code.gson:gson"
        versions: "[2.3,)"
      # Pin jmh to 1.20
      - dependency-name: "org.openjdk.jmh:jmh-core"
        versions: "[1.21,)"
      # Pin minimum support Hadoop version to 2.2.0
      - dependency-name: "org.apache.hadoop:hadoop-common"
        versions: "[2.2.1,)"
      - dependency-name: "org.apache.hadoop:hadoop-hdfs"
        versions: "[2.2.1,)"
      - dependency-name: "org.apache.hadoop:hadoop-mapreduce-client-core"
        versions: "[2.2.1,)"
      # Pin scala-library to 2.12.15
      - dependency-name: "org.scala-lang:scala-library"
        versions: "[2.12.16,)"
      # Pin maven-dependency-plugin to 3.1.2 due to MDEP-753, MDEP-757, MDEP-759
      - dependency-name: "org.apache.maven.plugins:maven-dependency-plugin"
        versions: "[3.2.0,)"
      # Pin protobuf-java to 3.22.3
      - dependency-name: "com.google.protobuf:protobuf-java"
        versions: "[3.22.4,)"
      # Pin jodd-core to 3.5.2
      - dependency-name: "org.jodd:jodd-core"
        versions: "[3.5.3,)"
      # Pin annotations to 17.0.0
      - dependency-name: "org.jetbrains.annotations"
        versions: "[17.0.1,)"
      # Pin mockito to 4.x
      - dependency-name: "org.mockito"
        versions: "[5.0.0,)"
      # Pin byte-buddy to 1.12.x aline with mockito
      - dependency-name: "net.bytebuddy"
        versions: "[1.13.0,)"
      # Pin spotless to 2.30.0 due to Java 8 support
      - dependency-name: "com.diffplug.spotless:spotless-maven-plugin"
        versions: "[2.31.0,)"
