From 7462dda2634b01a5c6e3e351622f09034de3dbaa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timo=20H=C3=BCgel?= <timo.huegel@js-soft.com>
Date: Thu, 13 Aug 2026 09:35:58 +0200
Subject: [PATCH 1/2] chore: override peer dependency SSH.NET's version to 2026

---
 Directory.Packages.props | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 188222a1ee..847e4a5795 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -97,6 +97,8 @@
     <PackageVersion Include="Spectre.Console" Version="[0.57.2]" />
     <!-- Even though we don't reference this package directly (it comes via Microsoft.Data.Sqlite), we have to pin this version because there is a vulnerability in versions <= 2.1.11 (see https://github.com/advisories/GHSA-2m69-gcr7-jv3q) -->
     <PackageVersion Include="SQLitePCLRaw.lib.e_sqlite3" Version="[2.1.12]" />
+    <!-- Even though we don't reference this package directly (it comes via Testcontainers), we have to pin this version because there is a vulnerability in versions <=2025.1.0> (see https://github.com/advisories/GHSA-q939-rpr3-3284) -->
+    <PackageVersion Include="SSH.NET" Version="[2026.0.0]" />
     <PackageVersion Include="Swashbuckle.AspNetCore" Version="[10.2.3]" />
     <PackageVersion Include="System.CommandLine" Version="[2.0.10]" />
     <PackageVersion Include="System.Data.SqlClient" Version="[4.9.1]" />

From b7cf2082dbedb682cdfa1e22955ca417ab31566c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timo=20H=C3=BCgel?= <timo.huegel@js-soft.com>
Date: Thu, 13 Aug 2026 09:35:58 +0200
Subject: [PATCH 2/2] chore: update packages.lock.json

---
 .../DatabaseMigrator.Tests/packages.lock.json | 19 ++++++++++---------
 Backbone.Tests.ArchUnit/packages.lock.json    | 19 ++++++++++---------
 .../packages.lock.json                        | 17 +++++++++--------
 3 files changed, 29 insertions(+), 26 deletions(-)

diff --git a/Applications/DatabaseMigrator/test/DatabaseMigrator.Tests/packages.lock.json b/Applications/DatabaseMigrator/test/DatabaseMigrator.Tests/packages.lock.json
index 6fb71e25de..d95b684302 100644
--- a/Applications/DatabaseMigrator/test/DatabaseMigrator.Tests/packages.lock.json
+++ b/Applications/DatabaseMigrator/test/DatabaseMigrator.Tests/packages.lock.json
@@ -1157,15 +1157,6 @@
           "SQLitePCLRaw.core": "2.1.11"
         }
       },
-      "SSH.NET": {
-        "type": "Transitive",
-        "resolved": "2025.1.0",
-        "contentHash": "jrnbtf0ItVaXAe6jE8X/kSLa6uC+0C+7W1vepcnRQB/rD88qy4IxG7Lf1FIbWmkoc4iVXv0pKrz+Wc6J4ngmHw==",
-        "dependencies": {
-          "BouncyCastle.Cryptography": "2.6.2",
-          "Microsoft.Extensions.Logging.Abstractions": "8.0.3"
-        }
-      },
       "System.ClientModel": {
         "type": "Transitive",
         "resolved": "1.14.0",
@@ -2538,6 +2529,16 @@
         "resolved": "2.1.12",
         "contentHash": "fWi8Dbknuhgg72fWinIdjXVaqO1hHL4YBBwVLnr7e1c9TAZwJ0QE38j9syW1hwx6HaqEVTwI+O07WPdZn8Rp0w=="
       },
+      "SSH.NET": {
+        "type": "CentralTransitive",
+        "requested": "[2026.0.0, 2026.0.0]",
+        "resolved": "2026.0.0",
+        "contentHash": "Yu9dirPq8l3oaat0+OQ7K0nUf5MmYltpia5UGqsApTG4zTPvBC1cxbNnC3NERij26dUST0A3Ef1QdHSn5ArbWQ==",
+        "dependencies": {
+          "BouncyCastle.Cryptography": "2.7.0",
+          "Microsoft.Extensions.Logging.Abstractions": "8.0.3"
+        }
+      },
       "System.Data.SqlClient": {
         "type": "CentralTransitive",
         "requested": "[4.9.1, 4.9.1]",
diff --git a/Backbone.Tests.ArchUnit/packages.lock.json b/Backbone.Tests.ArchUnit/packages.lock.json
index 4df2f4c030..bee509c106 100644
--- a/Backbone.Tests.ArchUnit/packages.lock.json
+++ b/Backbone.Tests.ArchUnit/packages.lock.json
@@ -1244,15 +1244,6 @@
           "SQLitePCLRaw.core": "2.1.11"
         }
       },
-      "SSH.NET": {
-        "type": "Transitive",
-        "resolved": "2025.1.0",
-        "contentHash": "jrnbtf0ItVaXAe6jE8X/kSLa6uC+0C+7W1vepcnRQB/rD88qy4IxG7Lf1FIbWmkoc4iVXv0pKrz+Wc6J4ngmHw==",
-        "dependencies": {
-          "BouncyCastle.Cryptography": "2.6.2",
-          "Microsoft.Extensions.Logging.Abstractions": "8.0.3"
-        }
-      },
       "Swashbuckle.AspNetCore.Swagger": {
         "type": "Transitive",
         "resolved": "10.2.3",
@@ -3195,6 +3186,16 @@
         "resolved": "2.1.12",
         "contentHash": "fWi8Dbknuhgg72fWinIdjXVaqO1hHL4YBBwVLnr7e1c9TAZwJ0QE38j9syW1hwx6HaqEVTwI+O07WPdZn8Rp0w=="
       },
+      "SSH.NET": {
+        "type": "CentralTransitive",
+        "requested": "[2026.0.0, 2026.0.0]",
+        "resolved": "2026.0.0",
+        "contentHash": "Yu9dirPq8l3oaat0+OQ7K0nUf5MmYltpia5UGqsApTG4zTPvBC1cxbNnC3NERij26dUST0A3Ef1QdHSn5ArbWQ==",
+        "dependencies": {
+          "BouncyCastle.Cryptography": "2.7.0",
+          "Microsoft.Extensions.Logging.Abstractions": "8.0.3"
+        }
+      },
       "Swashbuckle.AspNetCore": {
         "type": "CentralTransitive",
         "requested": "[10.2.3, 10.2.3]",
diff --git a/BuildingBlocks/test/BuildingBlocks.Infrastructure.Tests/packages.lock.json b/BuildingBlocks/test/BuildingBlocks.Infrastructure.Tests/packages.lock.json
index 8276fabf41..6d19f723e4 100644
--- a/BuildingBlocks/test/BuildingBlocks.Infrastructure.Tests/packages.lock.json
+++ b/BuildingBlocks/test/BuildingBlocks.Infrastructure.Tests/packages.lock.json
@@ -579,14 +579,6 @@
           "SQLitePCLRaw.core": "2.1.11"
         }
       },
-      "SSH.NET": {
-        "type": "Transitive",
-        "resolved": "2025.1.0",
-        "contentHash": "jrnbtf0ItVaXAe6jE8X/kSLa6uC+0C+7W1vepcnRQB/rD88qy4IxG7Lf1FIbWmkoc4iVXv0pKrz+Wc6J4ngmHw==",
-        "dependencies": {
-          "BouncyCastle.Cryptography": "2.6.2"
-        }
-      },
       "System.ClientModel": {
         "type": "Transitive",
         "resolved": "1.14.0",
@@ -1062,6 +1054,15 @@
         "requested": "[2.1.12, 2.1.12]",
         "resolved": "2.1.12",
         "contentHash": "fWi8Dbknuhgg72fWinIdjXVaqO1hHL4YBBwVLnr7e1c9TAZwJ0QE38j9syW1hwx6HaqEVTwI+O07WPdZn8Rp0w=="
+      },
+      "SSH.NET": {
+        "type": "CentralTransitive",
+        "requested": "[2026.0.0, 2026.0.0]",
+        "resolved": "2026.0.0",
+        "contentHash": "Yu9dirPq8l3oaat0+OQ7K0nUf5MmYltpia5UGqsApTG4zTPvBC1cxbNnC3NERij26dUST0A3Ef1QdHSn5ArbWQ==",
+        "dependencies": {
+          "BouncyCastle.Cryptography": "2.7.0"
+        }
       }
     },
     "net10.0/linux-arm64": {