[slawekjaranowski]

After the branch swap (apache/maven-sources#57) master holds the
.github/dependabot.yml from the former maven-compiler-plugin-3.x branch. Dependabot reads
its configuration only from the default branch, so that file was never used:
master lost the ignore rules of the 3.x line, and maven-compiler-plugin-4.x gets no updates.

This restores the configuration that was effective before the swap
(the file now on maven-compiler-plugin-4.x) with only the branch names swapped:
entries for maven-compiler-plugin-3.x now apply to master, and the former default-branch
entries target maven-compiler-plugin-4.x.

[ci skip]

🤖 Generated with Claude Code

[gnodet-bot]

This PR correctly restores the Dependabot configuration after the branch swap (apache/maven-sources#57). The mirror logic is sound: the two maven entries and two github-actions entries correctly cover both master (3.x line) and the new maven-compiler-plugin-4.x target, matching the structure that was on the 4.x branch before the swap.

One thing to be aware of: The existing Maven Core ignore rule (org.apache.maven:*) that was on master has been deliberately dropped here — the 4.x branch's entry for the 3.x target had only the Mockito pin, not the Maven Core ignore. If you want Maven Core updates to remain suppressed on the 3.x line too, add it back alongside the Mockito ignore.

Also note that open PR #1172 (Mockito 4 → 5 bump) is now superseded by the ignore rule added here (org.mockito:* >= 5.0.0). Once this PR is merged, Dependabot will stop creating Mockito 5.x bumps for the 3.x branch, and #1172 can be closed.

LGTM otherwise — the structure mirrors the 4.x file faithfully with the branch names correctly swapped.

This review was generated by an AI agent, Hermès on behalf of @gnodet.