Skip to content

fix(ci): exclude cw-commons from Dependabot cooldown - #430

Merged
leviem1 merged 1 commit into
mainfrom
fix/dependabot-cw-commons-cooldown
Aug 28, 2026
Merged

fix(ci): exclude cw-commons from Dependabot cooldown#430
leviem1 merged 1 commit into
mainfrom
fix/dependabot-cw-commons-cooldown

Conversation

@leviem1

@leviem1 leviem1 commented Aug 28, 2026

Copy link
Copy Markdown
Member

Summary

  • exclude cw-commons from Dependabot's default Gradle cooldown
  • preserve cooldown behavior for every other Gradle dependency
  • document the upstream Gradle release-date bug that makes the workaround necessary

Why

Dependabot cannot use versioned-POM Last-Modified dates for ordinary Maven dependencies declared through Gradle. Because JitPack does not expose usable dates in its artifact listing, cw-commons is treated as perpetually inside the default cooldown even though v0.3.2 has been available since August 4.

Upstream: dependabot/dependabot-core#16055

Validation

  • parsed .github/dependabot.yml with Ruby's YAML parser
  • git diff --check

@leviem1
leviem1 merged commit 118db38 into main Aug 28, 2026
7 checks passed
@leviem1
leviem1 deleted the fix/dependabot-cw-commons-cooldown branch August 28, 2026 07:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant