Merge pull request #88 from contentstack/fix/snyk-json-cve-2026-71847

fix: upgrade json to 2.21.2 to remediate CVE-2026-71847 (CVSS 8.7 High)

Author: OMpawar-21

CHANGELOG.md

@@ -1,5 +1,12 @@
 ## CHANGELOG
 
+## Version 0.10.1
+### Date: 17th-August-2026
+ ### Security
+ - Upgraded `json` dependency from `2.20.0` to `2.21.2` to remediate CVE-2026-71847 (SNYK-RUBY-JSON-18599450) — Use After Free (CWE-416) in `JSON::ResumableParser#partial_value`, CVSS 8.7 High.
+
+------------------------------------------------
+
 ## Version 0.10.0
 ### Date: 27th-July-2026
  ### Features
@@ -199,4 +206,4 @@
 
  - Initial release 
 
-------------------------------------------------
+------------------------------------------------

Gemfile.lock

@@ -39,7 +39,7 @@ GEM
     hashdiff (1.2.1)
     i18n (1.14.8)
       concurrent-ruby (~> 1.0)
-    json (2.20.0)
+    json (2.21.2)
     logger (1.7.0)
     minitest (6.0.6)
       drb (~> 2.0)
@@ -127,7 +127,7 @@ CHECKSUMS
   drb (2.2.3) sha256=0b00d6fdb50995fe4a45dea13663493c841112e4068656854646f418fda13373
   hashdiff (1.2.1) sha256=9c079dbc513dfc8833ab59c0c2d8f230fa28499cc5efb4b8dd276cf931457cd1
   i18n (1.14.8) sha256=285778639134865c5e0f6269e0b818256017e8cde89993fdfcbfb64d088824a5
-  json (2.20.0) sha256=9362bc6e55a952b056abf9167cf053358181c904cb70cd6eee0808ea830fc32b
+  json (2.21.2) sha256=1f1d3b7cf2b3ba1a69beca0bb6db13d5438b80bff3cd54cdaaa620b9b07c1c6a
   logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
   minitest (6.0.6) sha256=153ea36d1d987a62942382b61075745042a2b3123b1cd48f4c3675af9cc7d6f1
   nokogiri (1.19.3-aarch64-linux-gnu) sha256=46b89e5d7b9e844c2ee360794240c6ea2a4e6fa0c5892a4ed487db621224b639

lib/contentstack/version.rb

@@ -1,3 +1,3 @@
 module Contentstack
-  VERSION = "0.10.0"
+  VERSION = "0.10.1"
 end