Update Dependabot config to ignore WireMock's transitive dependencies

wordpress-mobile · Jul 18, 2024 · 372e029 · 372e029
1 parent 058d2c0
commit 372e029
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -48,3 +48,8 @@ updates:
  - dependency-name: "org.wordpress.aztec:picasso-loader"
  - dependency-name: "com.automattic:about"
  - dependency-name: "com.automattic:Automattic-Tracks-Android"
+ # Ignore dependencies that were added only to address security vulnerabilities of transitive WireMock dependencies
+ - dependency-name: "org.eclipse.jetty:jetty-webapp"
+ - dependency-name: "com.fasterxml.jackson.core:jackson-databind"
+ - dependency-name: "com.jayway.jsonpath:json-path"
+ - dependency-name: "commons-fileupload:commons-fileupload"