From c287e7335290bd46c9be6aa5cf92cf2eefaaa547 Mon Sep 17 00:00:00 2001
From: William Dutton <william.dutton@qld.gov.au>
Date: Thu, 9 Oct 2025 13:29:42 +1000
Subject: [PATCH 1/2] commons-lang 2.6 to commons-lang3 3.19.0 for cve patching

---
 pom.xml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/pom.xml b/pom.xml
index f0bc96e7b..29c0a951c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -131,7 +131,7 @@
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <version.jmh>1.37</version.jmh>
-        <version.findsecbugs>2.0.0-M3</version.findsecbugs>
+        <version.findsecbugs>1.14.0</version.findsecbugs>
         <version.fluido>2.0.0-M11</version.fluido>  <!-- Version 2.1.0 is available, but fails with this min Maven. -->
         <version.powermock>2.0.9</version.powermock>
         <version.spotbugs>4.9.3</version.spotbugs>
@@ -214,9 +214,9 @@
             </exclusions>
         </dependency>
         <dependency>
-            <groupId>commons-lang</groupId>
-            <artifactId>commons-lang</artifactId>
-            <version>2.6</version>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-lang3</artifactId>
+            <version>3.19.0</version>
         </dependency>
         <dependency>
             <groupId>commons-fileupload</groupId>
@@ -759,6 +759,8 @@
                 <version>10.0.4</version>
                 <configuration>
                     <nvdApiKey>${env.NVD_API_KEY}</nvdApiKey>
+                    <ossIndexUsername>${env.OSS_INDEX_USERNAME}</ossIndexUsername>
+                    <ossIndexPassword>${env.OSS_INDEX_PASSWORD}</ossIndexPassword>
                     <failBuildOnCVSS>1.0</failBuildOnCVSS>
                     <suppressionFiles>./suppressions.xml</suppressionFiles>
                 </configuration>

From 0358d7aaebe47d2f036c2b8bf1dc0464e1805623 Mon Sep 17 00:00:00 2001
From: William Dutton <william.dutton@qld.gov.au>
Date: Thu, 9 Oct 2025 13:32:12 +1000
Subject: [PATCH 2/2] Allow runs on any push branch/tag

---
 .github/workflows/maven.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index a81c84710..eb01ed88d 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -5,7 +5,6 @@ name: Java CI with Maven
 
 on:
   push:
-    branches: [ develop ]
   pull_request:
     branches: [ develop ]