From b440a34e8e41349eaf7c8e28a65fadb07d21faf0 Mon Sep 17 00:00:00 2001
From: Jean-Pierre Portier <jean-pierre.portier@mailgun.com>
Date: Mon, 30 Mar 2026 12:27:27 +0200
Subject: [PATCH 1/2] chrore: Fix dependency security
 (https://github.com/sinch/sinch-sdk-java/security/dependabot/8)

---
 examples/snippets/pom.xml | 8 ++++++++
 pom.xml                   | 4 ++--
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/examples/snippets/pom.xml b/examples/snippets/pom.xml
index cb7355022..b92dd2040 100644
--- a/examples/snippets/pom.xml
+++ b/examples/snippets/pom.xml
@@ -108,6 +108,14 @@
       <artifactId>slf4j-jdk14</artifactId>
       <version>2.0.9</version>
     </dependency>
+
+    <dependency>
+      <!-- transient dependency overwrite: https://github.com/sinch/sinch-sdk-java/security/dependabot/8 -->
+      <groupId>org.apache.maven</groupId>
+      <artifactId>maven-model</artifactId>
+      <version>[3.9.14,)</version>
+    </dependency>
+
   </dependencies>
 
 </project>
diff --git a/pom.xml b/pom.xml
index 9fc852db4..dee5af1a4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -196,7 +196,6 @@
         </pluginManagement>
 
         <plugins>
-
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>build-helper-maven-plugin</artifactId>
@@ -491,9 +490,10 @@
         </dependency>
 
         <dependency>
+            <!-- transient dependency overwrite: https://github.com/sinch/sinch-sdk-java/security/dependabot/8 -->
             <groupId>org.apache.maven</groupId>
             <artifactId>maven-model</artifactId>
-            <version>3.9.5</version>
+            <version>[3.9.14,)</version>
         </dependency>
 
     </dependencies>

From a258e58abdd0b703bbfe5e76e3eb48265101beae Mon Sep 17 00:00:00 2001
From: Jean-Pierre Portier <jean-pierre.portier@mailgun.com>
Date: Mon, 30 Mar 2026 14:14:17 +0200
Subject: [PATCH 2/2] doc: CHANGELOG update

---
 CHANGELOG.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3e89120d1..e971f5fc7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,6 +21,9 @@ All notable changes to the **Sinch Java SDK** are documented in this file.
 ### Major breaking changes with major release
 - see [MIGRATION-GUIDE](MIGRATION-GUIDE.md#200)
 
+### Chore
+- **[dependency]** Updated `maven-model` dependency to `3.9.14` or more recent version to fix security vulnerabilities [#8](https://github.com/sinch/sinch-sdk-java/security/dependabot/8)
+
 ### Conversation
 - **[feature]** Support `Project Settings` API
 - **[feature]** Support `Contacts Identity Conflicts` API