From 02cccf013f3403de10e723a729f74b0055043575 Mon Sep 17 00:00:00 2001 From: aiceflower Date: Thu, 11 Jun 2026 15:49:21 +0800 Subject: [PATCH] #AI COMMIT# Add Dependabot ignore rules for Flink shims modules MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Dependabot has raised PRs (#5426, #5427) that upgrade Flink dependencies from 1.16.2 to 1.20.4 inside flink-shims-1.16.2. This is incorrect because shims modules are version-specific compatibility layers — the module name must match the supported engine version. Upgrading the dependency in-place would break the shims contract and likely cause compilation or runtime failures across 4 major Flink versions. The correct approach to support a newer Flink version is to create a new shims module (e.g. flink-shims-1.20.4) following the existing pattern, rather than modifying the existing flink-shims-1.16.2 module. Co-Authored-By: Claude Opus 4.7 --- .github/dependabot.yml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000000..ceefd4f4af9 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,28 @@ +# +# Licensed to the Apache Software Foundation (ASF) under one or more +# contributor license agreements. See the NOTICE file distributed with +# this work for additional information regarding copyright ownership. +# The ASF licenses this file to You under the Apache License, Version 2.0 +# (the "License"); you may not use this file except in compliance with +# the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +version: 2 +updates: + - package-ecosystem: "maven" + directory: "/linkis-engineconn-plugins/flink/flink-shims-1.16.2" + ignore: + # Flink shims modules are version-specific compatibility layers. + # Upgrading the Flink dependency in-place breaks the shims contract + # (module name must match the supported Flink version). + # If a new Flink version needs to be supported, create a new shims module + # (e.g. flink-shims-1.20.4) instead of modifying existing ones. + - dependency-name: "org.apache.flink:*"