Skip to content

chore: back-merge master into development- #87 #89

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
OMpawar-21 merged 4 commits into from
Aug 13, 2026
Merged

chore: back-merge master into development- #87 #89

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
e1e44df
sca-scan.yml
Aravind-Kumar-cstk Aug 2, 2026
fb5acb3
fix: upgrade json to 2.21.2 to remediate CVE-2026-71847 (CVSS 8.7 High)
OMpawar-21 Aug 13, 2026
1c6c77b
Update release date for version 0.10.1
OMpawar-21 Aug 13, 2026
44d5bdc
Merge pull request #88 from contentstack/fix/snyk-json-cve-2026-71847
OMpawar-21 Aug 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .github/workflows/sca-scan.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,9 @@ on:
jobs:
security-sca:
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
steps:
- uses: actions/checkout@master
- name: Run Snyk to check for vulnerabilities
Expand Down
9 changes: 8 additions & 1 deletion CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,12 @@
## CHANGELOG

## Version 0.10.1
### Date: 17th-August-2026
### Security
- Upgraded `json` dependency from `2.20.0` to `2.21.2` to remediate CVE-2026-71847 (SNYK-RUBY-JSON-18599450) — Use After Free (CWE-416) in `JSON::ResumableParser#partial_value`, CVSS 8.7 High.

------------------------------------------------

## Version 0.10.0
### Date: 27th-July-2026
### Features
Expand Down Expand Up @@ -199,4 +206,4 @@

- Initial release

------------------------------------------------
------------------------------------------------
4 changes: 2 additions & 2 deletions Gemfile.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ GEM
hashdiff (1.2.1)
i18n (1.14.8)
concurrent-ruby (~> 1.0)
json (2.20.0)
json (2.21.2)
logger (1.7.0)
minitest (6.0.6)
drb (~> 2.0)
Expand Down Expand Up @@ -127,7 +127,7 @@ CHECKSUMS
drb (2.2.3) sha256=0b00d6fdb50995fe4a45dea13663493c841112e4068656854646f418fda13373
hashdiff (1.2.1) sha256=9c079dbc513dfc8833ab59c0c2d8f230fa28499cc5efb4b8dd276cf931457cd1
i18n (1.14.8) sha256=285778639134865c5e0f6269e0b818256017e8cde89993fdfcbfb64d088824a5
json (2.20.0) sha256=9362bc6e55a952b056abf9167cf053358181c904cb70cd6eee0808ea830fc32b
json (2.21.2) sha256=1f1d3b7cf2b3ba1a69beca0bb6db13d5438b80bff3cd54cdaaa620b9b07c1c6a
logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
minitest (6.0.6) sha256=153ea36d1d987a62942382b61075745042a2b3123b1cd48f4c3675af9cc7d6f1
nokogiri (1.19.3-aarch64-linux-gnu) sha256=46b89e5d7b9e844c2ee360794240c6ea2a4e6fa0c5892a4ed487db621224b639
Expand Down
2 changes: 1 addition & 1 deletion lib/contentstack/version.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
module Contentstack
VERSION = "0.10.0"
VERSION = "0.10.1"
end
Loading