Merge pull request #302 from contentstack/fix/snyk

Fix/snyk

Author: reeshika-h

CHANGELOG.md

@@ -1,5 +1,10 @@
 # CHANGELOG
 
+## v2.7.1
+
+### Jun 29, 2026
+- Snyk fixes
+
 ## v2.7.0
 
 ### Jun 15, 2026

pom.xml

@@ -5,7 +5,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.contentstack.sdk</groupId>
     <artifactId>java</artifactId>
-    <version>2.7.0</version>
+    <version>2.7.1</version>
     <packaging>jar</packaging>
     <name>contentstack-java</name>
     <description>Java SDK for Contentstack Content Delivery API</description>
@@ -36,7 +36,7 @@
         <json-version>20251224</json-version>
         <jacoco-maven-plugin-version>0.8.11</jacoco-maven-plugin-version>
         <maven-release-plugin-version>2.5.3</maven-release-plugin-version>
-        <contentstack-utils-version>1.3.0</contentstack-utils-version>
+        <contentstack-utils-version>1.5.1</contentstack-utils-version>
     </properties>
 
     <!-- Parent POM removed to avoid 403 from Maven Central in CI (Snyk, etc.). -->
@@ -181,7 +181,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.21.2</version>
+            <version>2.21.4</version>
         </dependency>
         <dependency>
             <groupId>com.slack.api</groupId>
@@ -229,17 +229,17 @@
             <dependency>
                 <groupId>org.springframework</groupId>
                 <artifactId>spring-core</artifactId>
-                <version>6.2.18</version>
+                <version>6.2.19</version>
             </dependency>
             <dependency>
                 <groupId>org.springframework</groupId>
                 <artifactId>spring-beans</artifactId>
-                <version>6.2.18</version>
+                <version>6.2.19</version>
             </dependency>
             <dependency>
                 <groupId>org.springframework</groupId>
                 <artifactId>spring-web</artifactId>
-                <version>6.2.18</version>
+                <version>6.2.19</version>
             </dependency>
             <!-- Fix CVE-2020-15250: junit pulled by json-simple -->
             <dependency>