From f4d8d0482a68063f938f62e769793e11361095ab Mon Sep 17 00:00:00 2001
From: Christian de Jonge <chjo@equinor.com>
Date: Thu, 13 Aug 2026 10:43:38 +0200
Subject: [PATCH] Bump SSH.NET to 2026.0.0 to patch GHSA-q939-rpr3-3284

---
 backend/api.test/api.test.csproj | 2 ++
 backend/api/api.csproj           | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/backend/api.test/api.test.csproj b/backend/api.test/api.test.csproj
index bab30db6e..8f5fce2fe 100644
--- a/backend/api.test/api.test.csproj
+++ b/backend/api.test/api.test.csproj
@@ -14,6 +14,8 @@
     <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.10" />
     <PackageReference Include="Moq" Version="4.20.72" />
     <PackageReference Include="Testcontainers.PostgreSql" Version="4.10.0" />
+    <!-- Override transitive SSH.NET pulled in by Testcontainers to patch GHSA-q939-rpr3-3284 -->
+    <PackageReference Include="SSH.NET" Version="2026.0.0" />
     <PackageReference Include="xunit.v3" Version="3.2.2" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
       <PrivateAssets>all</PrivateAssets>
diff --git a/backend/api/api.csproj b/backend/api/api.csproj
index 96a294151..143d16636 100644
--- a/backend/api/api.csproj
+++ b/backend/api/api.csproj
@@ -29,6 +29,8 @@
     <PackageReference Include="Npgsql.OpenTelemetry" Version="10.0.2" />
     <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.1" />
     <PackageReference Include="Testcontainers.PostgreSql" Version="4.10.0" />
+    <!-- Override transitive SSH.NET pulled in by Testcontainers to patch GHSA-q939-rpr3-3284 -->
+    <PackageReference Include="SSH.NET" Version="2026.0.0" />
     <PackageReference Include="Microsoft.Identity.Web" Version="4.3.0" />
     <PackageReference Include="Microsoft.Identity.Web.DownstreamApi" Version="4.3.0" />
     <PackageReference Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="10.0.10" />