From fdcd0aa8678fb174e97e103aef940d982653950a Mon Sep 17 00:00:00 2001
From: Kal Ahmed <kal.ahmed@epimorphics.com>
Date: Fri, 17 Oct 2025 16:57:21 +0100
Subject: [PATCH] Overwrite transitive dependency commons-beanutils 1.9.4 ->
 1.11.0 * Add explicit dependency on commons-beanutils to address CVE * Add a
 snapshotRepository to distributionManagement

---
 pom.xml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/pom.xml b/pom.xml
index 520b079..1aae3e7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -115,6 +115,12 @@
       <artifactId>commons-lang3</artifactId>
       <version>3.18.0</version>
     </dependency>
+    <dependency>
+      <!-- Overwrite dependency introduced by opencsv 5.9 -->
+      <groupId>commons-beanutils</groupId>
+      <artifactId>commons-beanutils</artifactId>
+      <version>1.11.0</version>
+    </dependency>
     <dependency>
       <groupId>org.yaml</groupId>
       <artifactId>snakeyaml</artifactId>
@@ -181,7 +187,17 @@
       <id>epi-public-s3-release</id>
       <name>Epimorphics S3 release repository</name>
       <url>s3://epi-repository/release</url>
+      <releases><enabled>true</enabled></releases>
+      <snapshots><enabled>false</enabled></snapshots>
     </repository>
+
+    <snapshotRepository>
+      <id>epi-public-s3-snapshot</id>
+      <name>Epimorphics S3 snapshot repository</name>
+      <url>s3://epi-repository/snapshot</url>
+      <releases><enabled>false</enabled></releases>
+      <snapshots><enabled>true</enabled></snapshots>
+    </snapshotRepository>
   </distributionManagement>
 
 </project>