From 3cccbaac3977c1e418e77a1ea56d2383dae0eaba Mon Sep 17 00:00:00 2001
From: Christoph Langguth <christoph.langguth@exense.ch>
Date: Fri, 28 Nov 2025 15:50:11 +0100
Subject: [PATCH 1/2] SED-4408 Add upper bounds version enforcement

---
 pom.xml | 32 ++++++++++++++++++++++++++++----
 1 file changed, 28 insertions(+), 4 deletions(-)

diff --git a/pom.xml b/pom.xml
index c99750d..2195f65 100644
--- a/pom.xml
+++ b/pom.xml
@@ -62,16 +62,17 @@
 		<maven.compiler.release>11</maven.compiler.release>
 
 		<!-- All dependencies should be resolvable from here, without further specifying versions -->
-		<dependencies.version>2025.6.25</dependencies.version>
+		<dependencies.version>2025.11.28-6929b52211ea7b7be588e49c</dependencies.version>
 
 		<!-- Maven build modules versions -->
 		<dep.mvn.compiler.version>3.14.0</dep.mvn.compiler.version>
 		<dep.mvn.jar.version>3.4.2</dep.mvn.jar.version>
 		<dep.mvn.jacoco.version>0.8.12</dep.mvn.jacoco.version>
 		<dep.mvn.deploy.version>3.0.0-M1</dep.mvn.deploy.version>
+		<dep.mvn.enforcer.version>3.1.0</dep.mvn.enforcer.version>
 		<dep.mvn.surefire.version>3.2.5</dep.mvn.surefire.version>
-		<dep.mvn.javadoc.version>3.3.2</dep.mvn.javadoc.version> <!-- newest: 3.7.0 -->
-		<dep.mvn.source.version>3.0.1</dep.mvn.source.version> <!-- newest: 3.3.1 -->
+		<dep.mvn.javadoc.version>3.3.2</dep.mvn.javadoc.version>
+		<dep.mvn.source.version>3.0.1</dep.mvn.source.version>
 		<dep.mvn.gpg.version>1.6</dep.mvn.gpg.version>
 		<dep.mvn.dependency-check.version>10.0.3</dep.mvn.dependency-check.version>
 	</properties>
@@ -212,6 +213,11 @@
 					<artifactId>maven-deploy-plugin</artifactId>
 					<version>${dep.mvn.deploy.version}</version>
 				</plugin>
+				<plugin>
+					<groupId>org.apache.maven.plugins</groupId>
+					<artifactId>maven-enforcer-plugin</artifactId>
+					<version>${dep.mvn.enforcer.version}</version>
+				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-source-plugin</artifactId>
@@ -322,6 +328,24 @@
 					</execution>
 				</executions>
 			</plugin>
+			<plugin>
+				<groupId>org.apache.maven.plugins</groupId>
+				<artifactId>maven-enforcer-plugin</artifactId>
+				<executions>
+					<execution>
+						<id>enforce-policies</id>
+						<goals>
+							<goal>enforce</goal>
+						</goals>
+						<configuration>
+							<rules>
+								<requireUpperBoundDeps/>
+							</rules>
+							<fail>true</fail>
+						</configuration>
+					</execution>
+				</executions>
+			</plugin>
 		</plugins>
 	</build>
 
@@ -396,4 +420,4 @@
 		</profile>
 	</profiles>
 
-</project>
\ No newline at end of file
+</project>

From 69884a970855bae71a56fa0f18e8d386033d1776 Mon Sep 17 00:00:00 2001
From: Christoph Langguth <christoph.langguth@exense.ch>
Date: Tue, 2 Dec 2025 10:28:22 +0100
Subject: [PATCH 2/2] SED-4408 bump deps

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 2195f65..f4fcfe9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -62,7 +62,7 @@
 		<maven.compiler.release>11</maven.compiler.release>
 
 		<!-- All dependencies should be resolvable from here, without further specifying versions -->
-		<dependencies.version>2025.11.28-6929b52211ea7b7be588e49c</dependencies.version>
+		<dependencies.version>2025.11.28-6929c90d11ea7b7be5b14369</dependencies.version>
 
 		<!-- Maven build modules versions -->
 		<dep.mvn.compiler.version>3.14.0</dep.mvn.compiler.version>