From 49a44a3588c7100da2dd6bef21a2d79c7b9c92e0 Mon Sep 17 00:00:00 2001
From: Rundeck CI <fdevans@gmail.com>
Date: Tue, 8 Sep 2026 15:18:11 -0700
Subject: [PATCH] Bump rundeck-core to 6.2.0-20260908 (CVE-2026-19032)

rundeck-core 6.1.0-20260803 pulls in a vulnerable transitive Jackson
version (CVE-2026-19032). 6.2.0-20260908 includes the fix.
---
 gradle/libs.versions.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 17de2ca..3c033c8 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -4,7 +4,7 @@ axionRelease = "1.21.3"
 # Libraries
 groovy = "4.0.33"
 junit = "4.13.2"
-rundeckCore = "6.1.0-20260803"
+rundeckCore = "6.2.0-20260908"
 slf4j = "2.0.18"
 jgit = "7.7.1.202607240634-r"
 jgitSshApache = "7.7.1.202607240634-r"