From 6dbcbfe2caaafda26a22c3db3d2cec876b86914c Mon Sep 17 00:00:00 2001
From: Alex Mukha <alex.mukha@alfresco.com>
Date: Wed, 5 Aug 2020 12:25:44 +0100
Subject: [PATCH] Limit cxf updates in dependabot

---
 .github/dependabot.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 49dabfc05..1e0c71cb3 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -23,6 +23,9 @@ updates:
       - dependency-name: "org.apache.calcite:calcite-core"
       - dependency-name: "org.apache.calcite:calcite-linq4j"
       - dependency-name: "org.apache.calcite.avatica:avatica-core"
+      # cxf lib updates should not be higher than 3.2
+      - dependency-name: "org.apache.cxf:*"
+        versions: "[3.3,)"
 
   - package-ecosystem: "docker"
     directory: "search-services/packaging/src/docker/"