From cb26ba11ee10140bde31af7f14b261ed0265a5e5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 18 Sep 2026 19:22:03 +0000
Subject: [PATCH] Bump org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85 in /fe

Bumps [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) from 1.84 to 1.85.
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.md)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 fe/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fe/pom.xml b/fe/pom.xml
index a04b3ad9838436..f66f09b08f326d 100644
--- a/fe/pom.xml
+++ b/fe/pom.xml
@@ -414,7 +414,7 @@ under the License.
         <!-- Huawei IAM pulls bcprov-jdk15on 1.69, whose final 1.70 release is vulnerable to
              CVE-2023-33202. Use the compatible jdk18on line at 1.84, which also fixes
              CVE-2025-14813, CVE-2026-0636, CVE-2026-3505, CVE-2026-5588, and CVE-2026-5598. -->
-        <bcprov-jdk18on.version>1.84</bcprov-jdk18on.version>
+        <bcprov-jdk18on.version>1.85</bcprov-jdk18on.version>
         <woodstox.version>6.5.1</woodstox.version>
         <kerby.version>2.0.3</kerby.version>
         <jettison.version>1.5.4</jettison.version>