From 176fa428f28d3ff0fe90d67ac298a13f5350be4f Mon Sep 17 00:00:00 2001
From: "Benito J. Gonzalez" <bgonzalez@unicon.net>
Date: Thu, 23 Apr 2026 14:47:33 -0700
Subject: [PATCH] chore: pin renovate constraints to portlet's supported
 versions
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add packageRules so Renovate stops proposing bumps that violate
this portlet's pinning:

- javax.portlet:portlet-api < 3.0 (uPortal runs JSR-286 / Portlet
  API 2.0; v3.x is JSR-362, a different container contract)
- spring-* and spring-data-jpa capped at this portlet's
  major-minor line
- hibernate-* capped (where Hibernate is used) — later majors
  require Jakarta EE + Java 17+, neither of which match this
  portlet's stack

Same pattern as AnnouncementsPortlet and basiclti-portlet, tailored
to this portlet's actual pinned versions.
---
 renovate.json | 50 ++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 48 insertions(+), 2 deletions(-)

diff --git a/renovate.json b/renovate.json
index a40ebf70..d3fb7864 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,4 +1,50 @@
 {
-  "extends": ["config:base", ":rebaseStalePrs", ":preserveSemverRanges"],
-  "renovateFork": true
+  "extends": [
+    "config:base",
+    ":rebaseStalePrs",
+    ":preserveSemverRanges"
+  ],
+  "renovateFork": true,
+  "packageRules": [
+    {
+      "matchPackageNames": [
+        "javax.portlet:portlet-api"
+      ],
+      "allowedVersions": "< 3.0",
+      "description": "uPortal runs JSR-286 (Portlet API 2.0). Portlet API 3.x (JSR-362) is a different container contract and is not supported."
+    },
+    {
+      "matchPackageNames": [
+        "org.springframework:spring-framework-bom",
+        "org.springframework:spring-aop",
+        "org.springframework:spring-beans",
+        "org.springframework:spring-context",
+        "org.springframework:spring-context-support",
+        "org.springframework:spring-core",
+        "org.springframework:spring-jdbc",
+        "org.springframework:spring-orm",
+        "org.springframework:spring-test",
+        "org.springframework:spring-tx",
+        "org.springframework:spring-web",
+        "org.springframework:spring-webmvc",
+        "org.springframework:spring-webmvc-portlet",
+        "org.springframework.data:spring-data-jpa"
+      ],
+      "allowedVersions": "< 5.0",
+      "description": "This portlet is pinned to Spring Framework 4.3.x. Next-major bumps require a coordinated migration."
+    },
+    {
+      "matchPackageNames": [
+        "org.hibernate:hibernate-core",
+        "org.hibernate:hibernate-ehcache",
+        "org.hibernate:hibernate-entitymanager",
+        "org.hibernate:hibernate-jpamodelgen",
+        "org.hibernate:hibernate-tools",
+        "org.hibernate:hibernate-validator",
+        "org.hibernate.orm:hibernate-core"
+      ],
+      "allowedVersions": "< 4.0",
+      "description": "Pinned to Hibernate 3.6.x. Later majors require Jakarta EE or Java 17+, neither of which match this portlet."
+    }
+  ]
 }