From 4ba0d38ca551938d7c0b3b5b4df2b60e6ce5b1ba Mon Sep 17 00:00:00 2001
From: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Date: Tue, 8 Sep 2026 11:29:04 -0600
Subject: [PATCH] Exclude webauthn4j-core from dependabot on 7.0.x

Newer webauthn4j-core releases require a Jackson minor bump, which
we do not want to pull into a maintenance branch.

See gh-19669
---
 .github/dependabot.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 94e935862c..f3e1edc98e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -20,6 +20,7 @@ updates:
       - shibboleth
     ignore:
       - dependency-name: com.nimbusds:nimbus-jose-jwt
+      - dependency-name: com.webauthn4j:webauthn4j-core
       - dependency-name: io.spring.nullability:*
       - dependency-name: org.python:jython
       - dependency-name: org.apache.directory.server:*