(maven-doxia-sitetools) branch master updated: Declare Apache MINA SSHD 2.20.0 in the SCM context module

[slachiewicz.apache.org via commits]

This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-doxia-sitetools.git


The following commit(s) were added to refs/heads/master by this push:
     new 475c7a0  Declare Apache MINA SSHD 2.20.0 in the SCM context module
475c7a0 is described below

commit 475c7a00f132f52ab732321ea16952c4ccf656c8
Author: Sylwester Lachiewicz <slachiew...@apache.org>
AuthorDate: Thu Oct 29 23:27:22 2026 +0000

    Declare Apache MINA SSHD 2.20.0 in the SCM context module
---
 doxia-site-scm-context/pom.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/doxia-site-scm-context/pom.xml b/doxia-site-scm-context/pom.xml
index d9b7083..2296c39 100644
--- a/doxia-site-scm-context/pom.xml
+++ b/doxia-site-scm-context/pom.xml
@@ -34,6 +34,7 @@ under the License.
 
   <properties>
     <scmVersion>2.2.1</scmVersion>
+    <minaSshdVersion>2.20.0</minaSshdVersion>
   </properties>
   <dependencies>
     <dependency>
@@ -77,6 +78,19 @@ under the License.
       <version>${scmVersion}</version>
       <scope>runtime</scope>
     </dependency>
+    <!-- JGit 5.13 (via the maven-scm JGit provider) pulls in Apache MINA SSHD 
2.7.0, which has known vulnerabilities -->
+    <dependency>
+      <groupId>org.apache.sshd</groupId>
+      <artifactId>sshd-sftp</artifactId>
+      <version>${minaSshdVersion}</version>
+      <scope>runtime</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.sshd</groupId>
+      <artifactId>sshd-osgi</artifactId>
+      <version>${minaSshdVersion}</version>
+      <scope>runtime</scope>
+    </dependency>
 
     <!-- test -->
     <dependency>