Patterns to Exclude Application Dependencies

Use the following patterns to exclude application dependencies from remediation recipes:

Pattern Description
org.apache.commons:commons-lang:3.12.* Don't upgrade the artifactId commons-lang with groupId org.apache.commons if it's major version is 3 and minor version is 12.
org.testng:testng:* Don't upgrade the artifactId testng with groupId org.testng, irrespective of the version.
com.acme:* Don't upgrade any packages with groupId com.acme, irrespective of the version.

For definition of groupId, artifactId, and version, see Guide to naming conventions on groupId, artifactId, and version.