FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Fix snyk issue by reeshika-h · Pull Request #245 · contentstack/contentstack-java · GitHub

/ contentstack-java Public

Fix snyk issue #245

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
reeshika-h merged 4 commits into from
Jan 2, 2026
Conversation 1 Commits 4 Checks 8 Files changed
Merged

Fix snyk issue #245

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
20ebe86
Update pom.xml dependencies for security fixes and enable tests in th…
reeshika-h Dec 31, 2025
8a27208
Update pom.xml to upgrade dependencies: rxjava to 3.1.11, retrofit to…
reeshika-h Dec 31, 2025
9191447
Update LICENSE year to 2026 for copyright compliance
reeshika-h Dec 31, 2025
31a350f
version bump
reeshika-h Jan 2, 2026
File filter

Filter by extension

Filter by extension .java  (1) .md  (1) .xml  (1) No extension  (1) All 4 file types selected
Only manifest files
Viewed files
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Unified
Split
Hide whitespace
Diff view
Unified
Split
Hide whitespace
5 changes: 5 additions & 0 deletions CHANGELOG.md
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
@@ -1,5 +1,10 @@
# CHANGELOG

## v2.3.2

### Jan 05, 2026
- Snyk Fixes

## v2.3.1

### Date: 03-Nov-2025
Expand Down
2 changes: 1 addition & 1 deletion LICENSE
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
MIT License

Copyright (c) 2012 - 2025 Contentstack
Copyright (c) 2012 - 2026 Contentstack

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
Expand Down
45 changes: 40 additions & 5 deletions pom.xml
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
<modelVersion>4.0.0</modelVersion>
<groupId>com.contentstack.sdk</groupId>
<artifactId>java</artifactId>
<version>2.3.1</version>
<version>2.3.2</version>
<packaging>jar</packaging>
<name>contentstack-java</name>
<description>Java SDK for Contentstack Content Delivery API</description>
Expand All @@ -20,8 +20,8 @@
<maven-source-plugin.version>3.3.1</maven-source-plugin.version>
<maven-javadoc-plugin.version>3.4.1</maven-javadoc-plugin.version>
<dotenv-source.version>3.0.0</dotenv-source.version>
<rxjava-source.version>3.1.10</rxjava-source.version>
<retrofit-source.version>2.11.0</retrofit-source.version>
<rxjava-source.version>3.1.11</rxjava-source.version>
<retrofit-source.version>3.0.0</retrofit-source.version>
<loggin.version>5.1.0</loggin.version>
<jococo-plugin.version>0.8.5</jococo-plugin.version>
<lombok-source.version>1.18.36</lombok-source.version>
Expand Down Expand Up @@ -172,12 +172,19 @@
<artifactId>json-simple</artifactId>
<version>${json-simple-version}</version>
<scope>compile</scope>
<!-- Exclude junit - it was incorrectly included as compile dep in json-simple -->
<exclusions>
<exclusion>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
</exclusion>
</exclusions>
</dependency>

<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>2.18.2</version>
<version>2.19.2</version>
</dependency>
<dependency>
<groupId>com.slack.api</groupId>
Expand All @@ -187,7 +194,7 @@
<dependency>
<groupId>org.jetbrains</groupId>
<artifactId>annotations</artifactId>
<version>24.0.1</version>
<version>26.0.2</version>
</dependency>
<dependency>
<groupId>com.squareup.okhttp3</groupId>
Expand Down Expand Up @@ -215,6 +222,34 @@
<artifactId>kotlin-stdlib</artifactId>
<version>2.1.0</version>
</dependency>
<!-- Fix CVE-2025-48924: Uncontrolled Recursion in commons-lang3 -->
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
<version>3.18.0</version>
</dependency>
<!-- Fix Spring vulnerabilities from contentstack-utils transitive deps -->
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-core</artifactId>
<version>6.2.11</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-beans</artifactId>
<version>6.2.11</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-web</artifactId>
<version>6.2.11</version>
</dependency>
<!-- Fix CVE-2020-15250: junit pulled by json-simple -->
<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
<version>4.13.2</version>
</dependency>
</dependencies>
</dependencyManagement>
<build>
Expand Down
1 change: 1 addition & 0 deletions src/test/java/com/contentstack/sdk/TestEntryModel.java
Show comments
View file
Open in desktop
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Original file line number Diff line number Diff line change
Expand Up @@ -254,6 +254,7 @@ void testConstructorWithPublishDetails() {
JSONObject publishDetails = new JSONObject();
publishDetails.put("environment", "production");
publishDetails.put("time", "2024-01-01T00:00:00.000Z");
// file deepcode ignore NoHardcodedCredentials/test: <please specify a reason of ignoring this>
publishDetails.put("user", "user123");

JSONObject json = new JSONObject();
Expand Down
Loading
Back | FazBrowse Home | New Git URL