From 554f0cd78574eeedee726964a34c2880d7753f39 Mon Sep 17 00:00:00 2001
From: Ludy87 <Ludy87@users.noreply.github.com>
Date: Fri, 3 Jul 2026 21:22:04 +0200
Subject: [PATCH] Update build.gradle

---
 build.gradle | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/build.gradle b/build.gradle
index fac4a715ed..3e66fe5d29 100644
--- a/build.gradle
+++ b/build.gradle
@@ -231,10 +231,13 @@ subprojects {
     dependencyManagement {
         imports {
             mavenBom "org.springframework.boot:spring-boot-dependencies:$springBootVersion"
+            mavenBom "org.opensaml:opensaml-bom:$openSamlVersion"
         }
         dependencies {
             // Override BOM-managed commons-lang3 for CVE-2025-48924 fix
             dependency "org.apache.commons:commons-lang3:$commonsLang3"
+            // Keep the OpenSAML XML security stack on the patched Santuario line.
+            dependency "org.apache.santuario:xmlsec:4.0.4"
         }
     }