Skip to content

chore(deps): block renovate noise on jakarta-migration + retired-project deps#555

Merged
bjagg merged 1 commit into
uPortal-Project:masterfrom
bjagg:chore/renovate-block-jakarta-junit5
May 11, 2026
Merged

chore(deps): block renovate noise on jakarta-migration + retired-project deps#555
bjagg merged 1 commit into
uPortal-Project:masterfrom
bjagg:chore/renovate-block-jakarta-junit5

Conversation

@bjagg
Copy link
Copy Markdown
Member

@bjagg bjagg commented May 8, 2026

Summary

Encode existing review decisions as packageRules so renovate stops re-opening update PRs the portlet can't take. Same shape as the JasigWidgetPortlets rollout (see uPortal-Project/JasigWidgetPortlets#319), adapted to this repo's pre-existing rules.

New rules:

  1. org.apache.portals.pluto:* < 3.0 — Apache Pluto Attic; v3.x is jakarta.portlet.
  2. jaxen:jaxen < 2.0 — Stay on Atlassian's 1.2.0-atlassian-2 fork.
  3. org.junit.jupiter:* / org.junit.platform:* / org.junit:junit-bom enabled: false — Project is JUnit 4.13.2 via parent.
  4. Extend existing JAXB rule to include com.sun.xml.bind:jaxb-impl and com.sun.xml.bind:jaxb-xjc.

Skipped vs JasigWidgets: com.liferay.portletmvc4spring:* already has a tighter rule (<= 5.2.0) — left alone.

Test plan

  • JSON syntax valid (verified locally)
  • After merge: forward-looking — when renovate next surfaces JUnit 5 / pluto-taglib 3 / jaxen 2 / jaxb-xjc 4 candidates, they don't open as PRs

…ect deps

Problem: renovate keeps re-opening update PRs for deps the portlet
can't take — pluto-taglib v3 (Apache Pluto attic'd, no jakarta.portlet
path), jaxen v2 (drops the Atlassian fork the parent has tracked for
years), JUnit 5 (Jupiter, when the parent's JUnit 4 line stops getting
patches), and jaxb-xjc 4 (jakarta.xml.bind namespace).

Goal: encode the existing review decisions as packageRules so renovate
stops surfacing them.

Changes: 3 new packageRules added to renovate.json + 1 existing rule
extended:
- pluto-taglib (and any org.apache.portals.pluto:* artifact) < 3.0
- jaxen:jaxen < 2.0 (stay on 1.2.0-atlassian-2 fork)
- org.junit.jupiter:* / org.junit.platform:* / org.junit:junit-bom
  enabled=false
- Existing jaxb rule extended to include com.sun.xml.bind:jaxb-impl
  and com.sun.xml.bind:jaxb-xjc (alongside the existing
  jakarta.xml.bind-api and jaxb-runtime entries).

Notes: portletmvc4spring is already constrained tighter than the
peer-portlet pattern (<= 5.2.0 vs < 6.0) — keeping the existing
rule. This matches the same shape applied to JasigWidgetPortlets
on chore/renovate-block-jakarta-junit5.
@bjagg bjagg merged commit 7a6443f into uPortal-Project:master May 11, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant