Merge pull request #28 from contentstack/staging

DX | 05-01-2026 | Release

Author: harshithad0703

.idea/misc.xml

@@ -1,2 +1,13 @@
 # CHANGELOG
 
+## v0.0.3
+
+### Jan 05, 2026
+
+- Snyk Fixes
+
+## v0.0.2
+
+### Oct 29, 2025
+
+-  Security Fixes

CHANGELOG.md

@@ -1,5 +1,5 @@
 The MIT License (MIT)
-Copyright © 2012-2025 Contentstack. All Rights Reserved
+Copyright © 2012-2026 Contentstack. All Rights Reserved
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
 associated documentation files (the "Software"), to deal in the Software without restriction,

LICENSE

@@ -13,7 +13,7 @@ android {
         minSdkVersion 24
         targetSdkVersion 34
         versionCode 1
-        versionName "0.0.2"
+        versionName "0.0.3"
     }
     buildTypes {
         release {
@@ -39,6 +39,21 @@ dependencies {
     implementation 'androidx.constraintlayout:constraintlayout:2.1.4'
     implementation 'androidx.lifecycle:lifecycle-livedata:2.7.0'
     implementation 'androidx.lifecycle:lifecycle-viewmodel:2.7.0'
+
+    // Security fixes for transitive dependencies
+    // Fix CVE-2022-25647 (Deserialization vulnerability in Gson)
+    implementation 'com.google.code.gson:gson:2.10.1'
+    // Fix CVE-2020-29582 (Information Exposure in kotlin-stdlib)
+    implementation 'org.jetbrains.kotlin:kotlin-stdlib:2.1.0'
+}
+
+// Force all kotlin-stdlib versions to 2.1.0 (fixes CVE-2020-29582 from transitive deps like Realm)
+configurations.all {
+    resolutionStrategy {
+        force 'org.jetbrains.kotlin:kotlin-stdlib:2.1.0'
+        force 'org.jetbrains.kotlin:kotlin-stdlib-jdk7:2.1.0'
+        force 'org.jetbrains.kotlin:kotlin-stdlib-jdk8:2.1.0'
+    }
 }
 
 mavenPublishing {