From a64a0c33a6d10c753af152bc53379a2e261391aa Mon Sep 17 00:00:00 2001
From: Basil Crow <me@basilcrow.com>
Date: Wed, 20 Sep 2023 10:02:14 -0700
Subject: [PATCH] Exclude unsuitable version of `plexus-utils` from Dependabot
 configuration

---
 .github/dependabot.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3323abe7bd..1f3dd6efc0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,12 +7,16 @@ updates:
     schedule:
       interval: "weekly"
     ignore:
+      # Maven core artifacts are provided by the running Maven, so do not update
+      # to prevent consuming something unavailable.
+      - dependency-name: "org.apache.maven:*"
+      # https://lists.apache.org/thread/ltd1g1dbv0lqqdw5q941gmrkfyn6m87m
+      - dependency-name: "org.codehaus.plexus:plexus-utils"
+        versions: [">=4.0.0"]
       # [JENKINS-68698] Must remain within Jetty 10.x until the Jakarta EE 9
       # migration is complete
       - dependency-name: "org.eclipse.jetty:jetty-maven-plugin"
         versions: [">=11.0.0"]
-      # maven core artifacts are provided by the running maven, do not update to prevent consuming something unavailable
-      - dependency-name: "org.apache.maven:*"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: