From df89ecf2e9bee4a841ef3275ccb98a2a182e2b63 Mon Sep 17 00:00:00 2001
From: reeshika-h <reeshika.hosmani@contentstack.com>
Date: Wed, 31 Dec 2025 17:04:06 +0530
Subject: [PATCH 1/2] Update dependencies in build.gradle for security fixes
 and adjust Kotlin version resolution

---
 .idea/misc.xml   |  1 -
 app/build.gradle | 15 +++++++++++++++
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/.idea/misc.xml b/.idea/misc.xml
index a60d85d..a0bffe7 100644
--- a/.idea/misc.xml
+++ b/.idea/misc.xml
@@ -1,4 +1,3 @@
-<?xml version="1.0" encoding="UTF-8"?>
 <project version="4">
   <component name="AndroidDexCompilerConfiguration">
     <option name="FORCE_JUMBO" value="true" />
diff --git a/app/build.gradle b/app/build.gradle
index 2ceef54..6da53d7 100644
--- a/app/build.gradle
+++ b/app/build.gradle
@@ -39,6 +39,21 @@ dependencies {
     implementation 'androidx.constraintlayout:constraintlayout:2.1.4'
     implementation 'androidx.lifecycle:lifecycle-livedata:2.7.0'
     implementation 'androidx.lifecycle:lifecycle-viewmodel:2.7.0'
+
+    // Security fixes for transitive dependencies
+    // Fix CVE-2022-25647 (Deserialization vulnerability in Gson)
+    implementation 'com.google.code.gson:gson:2.10.1'
+    // Fix CVE-2020-29582 (Information Exposure in kotlin-stdlib)
+    implementation 'org.jetbrains.kotlin:kotlin-stdlib:2.1.0'
+}
+
+// Force all kotlin-stdlib versions to 2.1.0 (fixes CVE-2020-29582 from transitive deps like Realm)
+configurations.all {
+    resolutionStrategy {
+        force 'org.jetbrains.kotlin:kotlin-stdlib:2.1.0'
+        force 'org.jetbrains.kotlin:kotlin-stdlib-jdk7:2.1.0'
+        force 'org.jetbrains.kotlin:kotlin-stdlib-jdk8:2.1.0'
+    }
 }
 
 mavenPublishing {

From 95a86e78ee809ebc93eb9ce0c9128f90807aaa64 Mon Sep 17 00:00:00 2001
From: reeshika-h <reeshika.hosmani@contentstack.com>
Date: Wed, 31 Dec 2025 20:39:22 +0530
Subject: [PATCH 2/2] Update LICENSE year to 2026

---
 LICENSE | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/LICENSE b/LICENSE
index 9a96f10..f8dc825 100644
--- a/LICENSE
+++ b/LICENSE
@@ -1,5 +1,5 @@
 The MIT License (MIT)
-Copyright © 2012-2025 Contentstack. All Rights Reserved
+Copyright © 2012-2026 Contentstack. All Rights Reserved
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
 associated documentation files (the "Software"), to deal in the Software without restriction,