From 74d5c243312c191a477e582342f6c4ac39b86499 Mon Sep 17 00:00:00 2001
From: Valera V Harseko <vharseko@3a-systems.ru>
Date: Tue, 13 Oct 2026 13:20:57 +0300
Subject: [PATCH 1/2] Bump OpenDJ to 5.2.0-SNAPSHOT for BouncyCastle 1.86 and
 bc-fips 2.1.3

OpenICF imports opendj-parent as its BOM, and it brings the
BouncyCastle versions Trivy flags in lib/framework: bc-fips 2.1.2
(CVE-2026-8763 critical, CVE-2026-8798, CVE-2026-13505, CVE-2026-13506)
and bcprov-jdk18on 1.84 (CVE-2026-8763 critical, CVE-2026-13506).

opendj-parent 5.2.0-SNAPSHOT manages bc-fips 2.1.3. bcprov-jdk18on 1.86
comes once OpenDJ PR #1190 moves it to commons 3.2.2-SNAPSHOT
(commons PR #326).
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 916714cc..aadb0939 100644
--- a/pom.xml
+++ b/pom.xml
@@ -43,7 +43,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.surefire.options />
         <doclint>all,-missing</doclint>
-        <opendj.version>5.1.2</opendj.version>
+        <opendj.version>5.2.0-SNAPSHOT</opendj.version>
    	</properties>
     <licenses>
         <license>

From 44ef7bb2d9d1f86a67ae262655b1ef71b69c34e8 Mon Sep 17 00:00:00 2001
From: Valery Kharseko <vharseko@3a-systems.ru>
Date: Thu, 22 Oct 2026 13:50:00 +0300
Subject: [PATCH 2/2] Update opendj.version from 5.2.0-SNAPSHOT to 5.2.0

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index aadb0939..2c078ed0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -43,7 +43,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.surefire.options />
         <doclint>all,-missing</doclint>
-        <opendj.version>5.2.0-SNAPSHOT</opendj.version>
+        <opendj.version>5.2.0</opendj.version>
    	</properties>
     <licenses>
         <license>