From 753f6991beba346eb53ed087c31d2a80ed6127c8 Mon Sep 17 00:00:00 2001
From: Philippe Charles <philippe.charles@nbb.be>
Date: Thu, 12 Oct 2023 13:21:47 +0200
Subject: [PATCH] Fix dependabot snapshot repository bug

---
 pom.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pom.xml b/pom.xml
index c8c2fcc..f4cc85f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -333,6 +333,7 @@
                                     <version>3.6.0</version>
                                 </requireMavenVersion>
                                 <requireNoRepositories>
+                                    <allowedRepositories>central</allowedRepositories>
                                     <allowSnapshotRepositories>true</allowSnapshotRepositories>
                                 </requireNoRepositories>
                                 <requirePluginVersions/>
@@ -550,7 +551,16 @@
         </profile>
     </profiles>
 
+    <!-- Custom repositories: order matters! -->
+    <!-- Maven Central is enforced at top to prevent dependabot to use snapshots as releases -->
     <repositories>
+        <repository>
+            <id>central</id>
+            <url>https://repo.maven.apache.org/maven2</url>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </repository>
         <repository>
             <id>jdemetra-snapshots</id>
             <url>https://oss.sonatype.org/content/repositories/snapshots/</url>