From 597c04c8d1e2ab697ce7d1863bdd79d1a708c522 Mon Sep 17 00:00:00 2001
From: John Baughman <16481152+jabaughman@users.noreply.github.com>
Date: Mon, 21 Sep 2026 13:10:01 -0700
Subject: [PATCH] Security: bump bcprov-jdk18on to 1.85

Constrain JReleaser plugin classpath bcprov-jdk18on to 1.85
(GHSA-9pwp-9qqc-pr26 / CVE-2026-8763).
---
 build.gradle.kts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/build.gradle.kts b/build.gradle.kts
index ab5f3ae..aeadb0c 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -43,6 +43,9 @@ buildscript {
             classpath("org.apache.tika:tika-core:3.2.2") {
                 because("CVE-2025-66516 — https://github.com/engine-public/engine-partner-api/security/dependabot/10")
             }
+            classpath("org.bouncycastle:bcprov-jdk18on:1.85") {
+                because("GHSA-9pwp-9qqc-pr26 / CVE-2026-8763 — https://github.com/engine-public/engine-partner-api/security/dependabot/65")
+            }
         }
     }
 }