Ignore Log4j upgrade to 2.24.2

since there are some known bugs that we encounter in the tests
hibernate · Dec 10, 2024 · 171feb3 · 171feb3
1 parent bd70986
commit 171feb3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -132,6 +132,9 @@ updates:
         versions: [ "4.2.1" ]
       # Enable updates after JDK 21 upgrade (as of jsonassert 1.5.2 it requires JDK 21)
       - dependency-name: "org.skyscreamer:jsonassert"
+      # Because of https://github.com/apache/logging-log4j2/issues/3234
+      - dependency-name: "org.apache.logging.log4j:*"
+        versions: ["2.24.2"]
   - package-ecosystem: "docker"
     registries:
       - dockerhub