Skip to content

Fix snyk issue #245

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
reeshika-h wants to merge 3 commits into
base: development
Choose a base branch
from
+41 −5
Draft

Fix snyk issue #245

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
20ebe86
Update pom.xml dependencies for security fixes and enable tests in th…
reeshika-h Dec 31, 2025
8a27208
Update pom.xml to upgrade dependencies: rxjava to 3.1.11, retrofit to…
reeshika-h Dec 31, 2025
9191447
Update LICENSE year to 2026 for copyright compliance
reeshika-h Dec 31, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion LICENSE
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
MIT License

Copyright (c) 2012 - 2025 Contentstack
Copyright (c) 2012 - 2026 Contentstack

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
Expand Down
43 changes: 39 additions & 4 deletions pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,8 +20,8 @@
<maven-source-plugin.version>3.3.1</maven-source-plugin.version>
<maven-javadoc-plugin.version>3.4.1</maven-javadoc-plugin.version>
<dotenv-source.version>3.0.0</dotenv-source.version>
<rxjava-source.version>3.1.10</rxjava-source.version>
<retrofit-source.version>2.11.0</retrofit-source.version>
<rxjava-source.version>3.1.11</rxjava-source.version>
<retrofit-source.version>3.0.0</retrofit-source.version>
<loggin.version>5.1.0</loggin.version>
<jococo-plugin.version>0.8.5</jococo-plugin.version>
<lombok-source.version>1.18.36</lombok-source.version>
Expand Down Expand Up @@ -172,12 +172,19 @@
<artifactId>json-simple</artifactId>
<version>${json-simple-version}</version>
<scope>compile</scope>
<!-- Exclude junit - it was incorrectly included as compile dep in json-simple -->
<exclusions>
<exclusion>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
</exclusion>
</exclusions>
</dependency>

<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>2.18.2</version>
<version>2.19.2</version>
</dependency>
<dependency>
<groupId>com.slack.api</groupId>
Expand All @@ -187,7 +194,7 @@
<dependency>
<groupId>org.jetbrains</groupId>
<artifactId>annotations</artifactId>
<version>24.0.1</version>
<version>26.0.2</version>
</dependency>
<dependency>
<groupId>com.squareup.okhttp3</groupId>
Expand Down Expand Up @@ -215,6 +222,34 @@
<artifactId>kotlin-stdlib</artifactId>
<version>2.1.0</version>
</dependency>
<!-- Fix CVE-2025-48924: Uncontrolled Recursion in commons-lang3 -->
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
<version>3.18.0</version>
</dependency>
<!-- Fix Spring vulnerabilities from contentstack-utils transitive deps -->
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-core</artifactId>
<version>6.2.11</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-beans</artifactId>
<version>6.2.11</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-web</artifactId>
<version>6.2.11</version>
</dependency>
<!-- Fix CVE-2020-15250: junit pulled by json-simple -->
<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
<version>4.13.2</version>
</dependency>
</dependencies>
</dependencyManagement>
<build>
Expand Down
1 change: 1 addition & 0 deletions src/test/java/com/contentstack/sdk/TestEntryModel.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -254,6 +254,7 @@ void testConstructorWithPublishDetails() {
JSONObject publishDetails = new JSONObject();
publishDetails.put("environment", "production");
publishDetails.put("time", "2024-01-01T00:00:00.000Z");
// file deepcode ignore NoHardcodedCredentials/test: <please specify a reason of ignoring this>
publishDetails.put("user", "user123");

JSONObject json = new JSONObject();
Expand Down
Loading