Ignore log4j in dependency updates

2021-05-19 17:46:59 +02:00 · 2021-05-19 17:46:59 +02:00 · 67673ff6d7
parent 809b909c30
commit 67673ff6d7
1 changed files with 1 additions and 2 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -5,6 +5,5 @@ updates:
  schedule:
    interval: weekly
  ignore:
+  # Ignore log4j, because it's a provided library
  - dependency-name: org.apache.logging.log4j:log4j-core
-    versions:
-    - 2.13.2