Merge pull request #513 from rnc/BR1

Prevent weft from major update

Author: rnc

.github/dependabot.yml

@@ -16,8 +16,11 @@ updates:
       # https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-
       exclude:
         - "org.jboss.da:*"
-        - "org.jboss.pnc*:*" # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
-        - "org.commonjava*:*" # match org.commonjava:xyz and org.commonjava.group:xyz
+        - "org.jboss.pnc*:*"        # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
+        - "org.commonjava*:*"       # match org.commonjava:xyz and org.commonjava.group:xyz
+    ignore:
+      - dependency-name: "org.commonjava.cdi.util:weft"
+        update-types: ["version-update:semver-major"]
   - package-ecosystem: "github-actions" # Also update Github actions
     directory: "/"
     schedule: