From eb5be3b2d3392f61833a5e26f119634a55a962f5 Mon Sep 17 00:00:00 2001
From: Jade Carino <carino_jade@yahoo.co.uk>
Date: Thu, 16 Apr 2026 15:21:20 +0100
Subject: [PATCH] fix: Explicitly define an easymock dependency on 5.6 so that
 3.4 (vulnerable) does not get pulled in through the dependency chain

Signed-off-by: Jade Carino <carino_jade@yahoo.co.uk>
---
 galasa-simplatform-application/pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/galasa-simplatform-application/pom.xml b/galasa-simplatform-application/pom.xml
index da69a2e..e626f93 100644
--- a/galasa-simplatform-application/pom.xml
+++ b/galasa-simplatform-application/pom.xml
@@ -127,6 +127,13 @@
 			</dependency>
 			<!-- https://mvnrepository.com/artifact/com.google.code.gson/gson -->
 
+			<!-- Overrides the version of easymock 3.4 that gets pulled in transiently -->
+			<dependency>
+				<groupId>org.easymock</groupId>
+				<artifactId>easymock</artifactId>
+				<version>5.6.0</version>
+			</dependency>
+
 		</dependencies>
 	</dependencyManagement>