Merge pull request #1217 from quickfix-j/copilot/update-mina-core-version

Unblock Dependabot security updates by bumping MINA to 2.2.7 and removing stale config-level ignore

Author: chrjohn

.github/dependabot.yml

@@ -8,9 +8,6 @@ updates:
     schedule:
       interval: "daily"
     open-pull-requests-limit: 10
-    ignore:
-      - dependency-name: "org.apache.mina:mina-core"
-        versions: ["<= 2.2.4"]  # Override the stale PR-comment ignore; allow any 2.2.5+ security fix
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

pom.xml

@@ -93,7 +93,7 @@
 		<fix-orchestra.repository.version>1.7.3</fix-orchestra.repository.version>
 		<docgen.version>1.6.8</docgen.version>
 		<jaxb.version>4.0.5</jaxb.version>
-		<apache.mina.version>2.2.4</apache.mina.version>
+		<apache.mina.version>2.2.7</apache.mina.version>
 		<commons.io.version>2.22.0</commons.io.version>
 		<orchestra.file>OrchestraFIXLatest.xml</orchestra.file>
 		<org.quickfixj.orchestra.tools.version>1.0.3</org.quickfixj.orchestra.tools.version>