From a1d4ba44e3a982deb6d8de1b9f0b6d50209d391c Mon Sep 17 00:00:00 2001
From: Patrick Plate <patrick.plate@adp.com>
Date: Fri, 12 Jun 2026 11:17:40 +0200
Subject: [PATCH] fix(security): re-add dependency version overrides for SCA
 compliance

---
 pom.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pom.xml b/pom.xml
index cfc2907..ade01d8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -35,6 +35,11 @@
         <!-- JaCoCo -->
         <jacoco.version>0.8.13</jacoco.version>
         <jacoco.minimum.coverage>1.00</jacoco.minimum.coverage>
+        <!-- Security overrides (2026-06-12) — fixes 10 HIGH + 18 MEDIUM Snyk SCA findings -->
+        <spring-framework.version>7.0.8</spring-framework.version>
+        <tomcat.version>11.0.22</tomcat.version>
+        <spring-data-bom.version>2025.1.6</spring-data-bom.version>
+        <postgresql.version>42.7.11</postgresql.version>
     </properties>
 
     <dependencyManagement>