Fix: bump spring-web to 7.0.9 to resolve Snyk findings - v1.6.3

CHANGELOG.md

@@ -2,6 +2,12 @@
 
 A brief description of what changes project contains
 
+## Oct 26, 2026
+
+#### v1.6.3
+
+- Fix: Updated `org.springframework:spring-web` from 7.0.8 to 7.0.9 to resolve Snyk-reported Spring Framework vulnerabilities (resource allocation without limits, XSS, HTTP response splitting, sensitive cookie without Secure attribute). Patch-level bump; no API or dependency changes.
+
 ## Aug 26, 2026
 
 #### v1.6.2

pom.xml

@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.contentstack.sdk</groupId>
     <artifactId>utils</artifactId>
-    <version>1.6.2</version>
+    <version>1.6.3</version>
     <packaging>jar</packaging>
     <name>Contentstack-utils</name>
     <description>Java Utils SDK for Contentstack Content Delivery API, Contentstack is a headless CMS</description>
@@ -28,7 +28,7 @@
         <maven-release-plugin.version>2.5.3</maven-release-plugin.version>
         <validation-version>2.0.1.Final</validation-version>
         <json-version>20260522</json-version>
-        <spring-web-version>7.0.8</spring-web-version>
+        <spring-web-version>7.0.9</spring-web-version>
         <org.apache.commons-text>1.15.0</org.apache.commons-text>
     </properties>