From fd438db27c75b206b430d9253992e50457ddb1e9 Mon Sep 17 00:00:00 2001
From: syed-awsaf-informed <syed.awsaf@informed.com>
Date: Fri, 24 Jul 2026 15:02:30 +0100
Subject: [PATCH 1/2] fix(ospo): bump postgresql to 42.7.12 to resolve
 CVE-2026-54291 (#63)

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index a296f32..fed4c18 100644
--- a/pom.xml
+++ b/pom.xml
@@ -46,7 +46,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <spring-cloud.version>2025.0.0</spring-cloud.version>
     <jackson-bom.version>2.21.4</jackson-bom.version>
-    <postgresql.version>42.7.11</postgresql.version>
+    <postgresql.version>42.7.12</postgresql.version>
     <flyway.version>11.10.4</flyway.version>
     <plugin.spotless>2.46.1</plugin.spotless>
     <plugin.spotless.gson>2.11.0</plugin.spotless.gson>

From 8df42bdfd9696adeb1c998156651e2d767aae2fa Mon Sep 17 00:00:00 2001
From: Syed Awsaf <syed.awsaf@informed.com>
Date: Fri, 24 Jul 2026 15:05:37 +0100
Subject: [PATCH 2/2] fix(ospo): release 1.2.2

---
 CHANGELOG.md | 6 ++++++
 pom.xml      | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d89e112..2f6fe70 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,12 @@ This project follows **Semantic Versioning (SemVer)** ([semver.org](https://semv
 
 ---
 
+## [1.2.2] - 2026-07-24
+
+### Security
+
+- Bumped `org.postgresql:postgresql` from 42.7.11 to 42.7.12 to resolve CVE-2026-54291.
+
 ## [1.2.1] - 2026-07-16
 
 ### Changed
diff --git a/pom.xml b/pom.xml
index fed4c18..bc3db5a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -14,7 +14,7 @@
   </parent>
   <groupId>uk.gov.dbt.ndtp.ia.management.node</groupId>
   <artifactId>management-node</artifactId>
-  <version>1.2.0</version>
+  <version>1.2.2</version>
   <packaging>jar</packaging>
   <name>management-node</name>
   <description>Provides Management capabilities over IA Node Net</description>