fix: update version to 2.7.2 and add Snyk fixes to CHANGELOG

CHANGELOG.md

@@ -1,5 +1,10 @@
 # CHANGELOG
 
+## v2.7.2
+
+### Jul 06, 2026
+- Snyk fixes
+
 ## v2.7.1
 
 ### Jun 29, 2026

pom.xml

@@ -5,7 +5,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.contentstack.sdk</groupId>
     <artifactId>java</artifactId>
-    <version>2.7.1</version>
+    <version>2.7.2</version>
     <packaging>jar</packaging>
     <name>contentstack-java</name>
     <description>Java SDK for Contentstack Content Delivery API</description>
@@ -24,7 +24,7 @@
         <retrofit-source.version>3.0.0</retrofit-source.version>
         <loggin.version>5.3.2</loggin.version>
         <jococo-plugin.version>0.8.5</jococo-plugin.version>
-        <lombok-source.version>1.18.42</lombok-source.version>
+        <lombok-source.version>1.18.44</lombok-source.version>
         <junit-jupiter.version>5.11.4</junit-jupiter.version>
         <junit-jupiter-engine.version>5.8.0-M1</junit-jupiter-engine.version>
         <gson.version>2.8.8</gson.version>
@@ -33,7 +33,7 @@
         <maven-gpg-plugin.version>1.5</maven-gpg-plugin.version>
         <maven-compiler-plugin.version>3.8.1</maven-compiler-plugin.version>
         <nexus-staging-maven-plugin.version>1.6.13</nexus-staging-maven-plugin.version>
-        <json-version>20251224</json-version>
+        <json-version>20260522</json-version>
         <jacoco-maven-plugin-version>0.8.11</jacoco-maven-plugin-version>
         <maven-release-plugin-version>2.5.3</maven-release-plugin-version>
         <contentstack-utils-version>1.5.1</contentstack-utils-version>
@@ -178,11 +178,6 @@
             </exclusions>
         </dependency>
 
-        <dependency>
-            <groupId>com.fasterxml.jackson.core</groupId>
-            <artifactId>jackson-databind</artifactId>
-            <version>2.21.4</version>
-        </dependency>
         <dependency>
             <groupId>com.slack.api</groupId>
             <artifactId>bolt</artifactId>

src/main/java/com/contentstack/sdk/CSHttpConnection.java

@@ -1,13 +1,12 @@
 package com.contentstack.sdk;
 
-import com.fasterxml.jackson.databind.ObjectMapper;
-import com.fasterxml.jackson.databind.json.JsonMapper;
-import com.fasterxml.jackson.databind.type.MapType;
 import java.io.IOException;
 import java.io.UnsupportedEncodingException;
 import java.net.SocketTimeoutException;
 import java.net.URLEncoder;
+import java.math.BigDecimal;
 import java.nio.charset.StandardCharsets;
+import java.util.ArrayList;
 import java.util.HashMap;
 import java.util.Iterator;
 import java.util.LinkedHashMap;
@@ -201,6 +200,41 @@ private JSONObject createOrderedJSONObject(Map<String, Object> map) {
         return json;
     }
 
+    /**
+     * Recursively converts a parsed {@link JSONObject} into plain Java collections that
+     * mirror what the response models expect: JSON objects become {@link LinkedHashMap}
+     * (preserving key order) and JSON arrays become {@link ArrayList}.
+     */
+    private static Map<String, Object> jsonToOrderedMap(JSONObject object) {
+        LinkedHashMap<String, Object> map = new LinkedHashMap<>();
+        for (String key : object.keySet()) {
+            map.put(key, convertJsonValue(object.get(key)));
+        }
+        return map;
+    }
+
+    private static Object convertJsonValue(Object value) {
+        if (value == null || value == JSONObject.NULL) {
+            return null;
+        }
+        if (value instanceof JSONObject) {
+            return jsonToOrderedMap((JSONObject) value);
+        }
+        if (value instanceof JSONArray) {
+            JSONArray array = (JSONArray) value;
+            ArrayList<Object> list = new ArrayList<>(array.length());
+            for (int i = 0; i < array.length(); i++) {
+                list.add(convertJsonValue(array.get(i)));
+            }
+            return list;
+        }
+        // Normalize floating-point numbers to Double to match the previous parser's output.
+        if (value instanceof BigDecimal) {
+            return ((BigDecimal) value).doubleValue();
+        }
+        return value;
+    }
+
     private void getService(String requestUrl) throws IOException {
 
         this.headers.put(X_USER_AGENT_KEY, "contentstack-delivery-java/" + SDK_VERSION);
@@ -226,12 +260,11 @@ private void getService(String requestUrl) throws IOException {
                     response = pluginResponseImp(request, response);
                 }
                 try {
-                    // Use Jackson to parse the JSON while preserving order
-                    ObjectMapper mapper = JsonMapper.builder().build();
-                    MapType type = mapper.getTypeFactory().constructMapType(LinkedHashMap.class, String.class,
-                            Object.class);
-                    Map<String, Object> responseMap = mapper.readValue(response.body().string(), type);
-
+                    // Parse the JSON into ordered maps/lists using org.json. Nested objects
+                    // become LinkedHashMap and arrays become ArrayList, matching the shape
+                    // the response models expect.
+                    Map<String, Object> responseMap = jsonToOrderedMap(new JSONObject(response.body().string()));
+
                     // Use the custom method to create an ordered JSONObject
                     responseJSON = createOrderedJSONObject(responseMap);
                     if (this.config.livePreviewEntry != null && !this.config.livePreviewEntry.isEmpty()) {