From 51c12791884e8ff217a449794c9975ba91680546 Mon Sep 17 00:00:00 2001
From: Rundeck CI <fdevans@gmail.com>
Date: Tue, 8 Sep 2026 15:18:02 -0700
Subject: [PATCH] Bump rundeck-core to 6.2.0-20260908 (CVE-2026-19032)

rundeck-core 6.1.0-20260803 pulls in a vulnerable transitive Jackson
version (CVE-2026-19032). 6.2.0-20260908 includes the fix.
---
 gradle/libs.versions.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index f9d0b89..c5a18f7 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -1,7 +1,7 @@
 [versions]
 axionRelease = "1.21.3"
 groovy = "4.0.33"
-rundeckCore = "6.1.0-20260803"
+rundeckCore = "6.2.0-20260908"
 spock = "2.4-groovy-4.0"
 # Security overrides for transitive dependencies
 commonsLang3 = "3.20.0"