From f40fb4a83c1ecd12b2d85621ddf271279959ba58 Mon Sep 17 00:00:00 2001
From: reeshika-h <reeshika.hosmani@contentstack.com>
Date: Mon, 26 Oct 2026 16:25:22 +0530
Subject: [PATCH] Fix: bump spring-web to 7.0.9

Patch bump to resolve Spring Framework vulnerabilities; v1.6.3.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md | 6 ++++++
 pom.xml      | 4 ++--
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4c76ace..c82160d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 A brief description of what changes project contains
 
+## Oct 26, 2026
+
+#### v1.6.3
+
+- Fix: Updated `org.springframework:spring-web` from 7.0.8 to 7.0.9 to resolve Snyk-reported Spring Framework vulnerabilities (resource allocation without limits, XSS, HTTP response splitting, sensitive cookie without Secure attribute). Patch-level bump; no API or dependency changes.
+
 ## Aug 26, 2026
 
 #### v1.6.2
diff --git a/pom.xml b/pom.xml
index ec27095..100309f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.contentstack.sdk</groupId>
     <artifactId>utils</artifactId>
-    <version>1.6.2</version>
+    <version>1.6.3</version>
     <packaging>jar</packaging>
     <name>Contentstack-utils</name>
     <description>Java Utils SDK for Contentstack Content Delivery API, Contentstack is a headless CMS</description>
@@ -28,7 +28,7 @@
         <maven-release-plugin.version>2.5.3</maven-release-plugin.version>
         <validation-version>2.0.1.Final</validation-version>
         <json-version>20260522</json-version>
-        <spring-web-version>7.0.8</spring-web-version>
+        <spring-web-version>7.0.9</spring-web-version>
         <org.apache.commons-text>1.15.0</org.apache.commons-text>
     </properties>