dependabot / dependabot/dependabot-core

For a given package, `ignore` versions by regex

Open
#3,746 5 comments 3 reactions 0 assignees View on GitHub
F: configuration-file F: dependency-ignores F: noise T: feature-request
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

When there is a new update for kotlinx-coroutines-core we always get a update for the `*-native-mt` version but we want the "normal" version, ex `1.5.0` instead of `1.5.0-native-mt`. How would that be possible?

```
version: 2

updates:
- package-ecosystem: maven
directory: "/"
schedule:
interval: weekly
day: "sunday"
time: "04:00"
open-pull-requests-limit: 10
ignore:
- dependency-name: org.jetbrains.kotlinx:kotlinx-coroutines-core
versions:
- "*-native-mt"
```

Contributor guide

Open the contributing guide

Research direction

Start by tracing Maven update handling for the ignore block shown in the issue, then compare current version matching with the requested wildcard behavior. Done means the configuration can exclude *-native-mt versions for this package without suppressing 1.5.0, with coverage for both cases.

Written by the indexing model from the issue text.

Assessment

Tech stack
kotlin
Domain
tooling
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.