From 596e30b01dec57c4052398a118ce5f25bdb4ce9a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 22 Jul 2026 11:45:09 +0000
Subject: [PATCH 1/2] chore(deps): bump software.amazon.awssdk:bom in /backend

Bumps software.amazon.awssdk:bom from 2.48.0 to 2.49.0.

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/pom.xml b/backend/pom.xml
index aa8a742a..b4249ac3 100644
--- a/backend/pom.xml
+++ b/backend/pom.xml
@@ -31,7 +31,7 @@
         <archiunit.version>1.4.2</archiunit.version>
         <!-- External secret stores (AF-448). -->
         <spring-vault.version>4.1.0</spring-vault.version>
-        <awssdk.version>2.48.0</awssdk.version>
+        <awssdk.version>2.49.0</awssdk.version>
         <azure-sdk-bom.version>1.3.7</azure-sdk-bom.version>
         <!-- Repo-root connector catalog (issue #334), bundled onto the classpath as connectors/**.
              Local/CI builds run from backend/ so the default resolves to the sibling folder; the

From dc9d1b3e65f538e7b06f4a4c3c5b345f229d37b1 Mon Sep 17 00:00:00 2001
From: Tigran Babloyan <tigran.babloyan@gmail.com>
Date: Fri, 24 Jul 2026 13:51:56 +0400
Subject: [PATCH 2/2] test(requestgroups): stop scheduled job racing group
 persistence IT

---
 .../RequestGroupPersistenceIntegrationTest.java           | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/backend/src/test/java/com/bablsoft/accessflow/requestgroups/RequestGroupPersistenceIntegrationTest.java b/backend/src/test/java/com/bablsoft/accessflow/requestgroups/RequestGroupPersistenceIntegrationTest.java
index a36e3bdd..45ab3c10 100644
--- a/backend/src/test/java/com/bablsoft/accessflow/requestgroups/RequestGroupPersistenceIntegrationTest.java
+++ b/backend/src/test/java/com/bablsoft/accessflow/requestgroups/RequestGroupPersistenceIntegrationTest.java
@@ -29,8 +29,12 @@
  * (enums, jsonb columns), and the native scheduled-due scan executes against real Postgres — booting
  * the full application context (so the new {@code requestgroups} beans wire cleanly).
  */
-@SpringBootTest(
-        properties = "accessflow.encryption-key=00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff")
+@SpringBootTest(properties = {
+        "accessflow.encryption-key=00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff",
+        // Pin the scheduled jobs far out so the live ScheduledGroupRunJob cannot fire mid-test and
+        // flip the just-inserted APPROVED group to EXECUTING before the findScheduledDueIds assertion.
+        "accessflow.requestgroups.run-poll-interval=PT24H",
+        "accessflow.requestgroups.timeout-poll-interval=PT24H"})
 @ImportTestcontainers(TestcontainersConfig.class)
 class RequestGroupPersistenceIntegrationTest {