From d72bb51602f47e1d5ca0e43e8f4a39d462ba27c5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 10 Dec 2025 17:25:23 +0000
Subject: [PATCH] Bump org.apache.struts:struts2-core in /.github/workflows

Bumps [org.apache.struts:struts2-core](https://github.com/apache/struts) from 2.3.20 to 6.8.0.
- [Release notes](https://github.com/apache/struts/releases)
- [Commits](https://github.com/apache/struts/commits)

---
updated-dependencies:
- dependency-name: org.apache.struts:struts2-core
  dependency-version: 6.8.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/pom.xml b/.github/workflows/pom.xml
index 4379f59..ee37e9d 100644
--- a/.github/workflows/pom.xml
+++ b/.github/workflows/pom.xml
@@ -33,7 +33,7 @@
         <dependency>
             <groupId>org.apache.struts</groupId>
             <artifactId>struts2-core</artifactId>
-            <version>2.3.20</version>
+            <version>6.8.0</version>
         </dependency>
 
         <!-- Dependency with an older version to demonstrate deeper transitive vulnerabilities: commons-collections 3.2.1 (CVE-2015-7501) -->