bomr:
  bom: spring-boot-project/spring-boot-dependencies/pom.xml
  upgrade:
    github:
      organization: spring-projects
      repository: spring-boot
      issue-labels:
        - 'type: dependency-upgrade'
    policy: same-minor-version
    prohibited:
      - project: couchbase-client
        versions:
          # Jar contains dependencies' classes resulting in duplicates
          - '[2.7.3]'
          # Artifacts published as .bundle files rather than .jar files
          - '[2.7.5]'
      - project: dom4j
        versions:
          # Old versions that use yyyymmdd format
          - '[20040101,)'
      - project: glassfish-jaxb
        versions:
          # Switches to Jarkarta EE API dependencies resulting in duplicate classes
          - '[2.3.2,2.4)'
      - project: saaj-impl
        versions:
          # Switches to Jarkarta EE API dependencies resulting in duplicate classes
          - '[1.5.1,1.6)'
      - project: selenium-htmlunit
        versions:
          # Requires a new minor of Selenium which contains breaking API changes
          - '[2.33.1,2.34)'
  verify:
    ignored-dependencies:
      # Avoid confliciting transitive requirements for
      # io.grpc:grpc-core:jar:[1.0.1,1.0.1] (Jetty),
      # io.grpc:grpc-core:jar:[1.14.0,1.14.0] (Micrometer's Azure Registry), and
      # io.grpc:grpc-core:jar:[1.15.0,1.15.0] (Micrometer's Stackdriver Registry)
      - 'io.micrometer:micrometer-registry-azure-monitor'
      - 'org.eclipse.jetty.gcloud:jetty-gcloud-session-manager'
      - 'org.eclipse.jetty:jetty-home'
      # Mismanaged by Jetty's bom. See
      # https://github.com/eclipse/jetty.project/issues/3680
      - 'org.eclipse.jetty:infinispan-embedded'
      - 'org.eclipse.jetty:infinispan-remote'
    repositories:
      # Solr's Restlet dependencies
      - 'https://maven.restlet.com'
      # Caffeine Simulator's dependencies
      - 'https://maven.imagej.net/content/repositories/public/'