From 1dbc9d238d6b5ea3f77743efd909b2ecbf093dd7 Mon Sep 17 00:00:00 2001
From: Sylwester Lachiewicz <slachiewicz@apache.org>
Date: Mon, 21 Sep 2026 21:42:08 +0200
Subject: [PATCH] Keep plexus-xml on 3.x in Dependabot

---
 .github/dependabot.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b76b895..9f144dc 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,6 +4,10 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    ignore:
+      # plexus-xml 4.x depends on the Maven 4 XML API
+      - dependency-name: "org.codehaus.plexus:plexus-xml"
+        versions: [">= 4.0.0"]
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: