From d1763c8095dcbbb0e2120305ee9413669920e14b Mon Sep 17 00:00:00 2001
From: Derrick Williams <derrickaw@google.com>
Date: Tue, 7 Apr 2026 00:06:08 +0000
Subject: [PATCH] update activemq to minimize vulnerabilities

---
 v2/pom.xml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/v2/pom.xml b/v2/pom.xml
index b837f11e8d..5b47981fa2 100644
--- a/v2/pom.xml
+++ b/v2/pom.xml
@@ -46,8 +46,9 @@
         <astra-io.version>4.18.1</astra-io.version>
         <dataplex.api.version>v1-rev20251113-2.0.0</dataplex.api.version>
         <!-- ActiveMQ uses JMS 1.1 for versions < 5.18.0 -->
-        <!-- This can only be upgraded after Beam moves to JMS 2.0 -->
-        <activemq.version>5.17.7</activemq.version>
+        <!-- ActiveMQ uses both JMS 1.1 and 2.0 for 5.18.0 <= x < 6.0.0 -->
+        <!-- Beam will need to migrate to Jakarta Messaging (jakarta.jms) before this can be updated to 6.2.x -->
+        <activemq.version>5.19.3</activemq.version>
         <licenseHeaderFile>../JAVA_LICENSE_HEADER</licenseHeaderFile>
     </properties>