Fix: use approved placeholder in test; patch build-time deps

Rename arbitrary password key in TestError; bump bcprov, guava and asm in the test-only resolutionStrategy block.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Author: reeshika-h

contentstack/build.gradle

@@ -148,7 +148,19 @@ dependencies {
     // androidx.test/espresso pull bcprov-jdk18on 1.80 (test-only); force the patched
     // release for Snyk SNYK-JAVA-ORGBOUNCYCASTLE-16074612 (CVE-2026-5598, Timing Attack)
     // and SNYK-JAVA-ORGBOUNCYCASTLE-16075266 (CVE-2025-14813). Not shipped in the AAR.
-    configurations.configureEach { resolutionStrategy.force 'org.bouncycastle:bcprov-jdk18on:1.85' }
+    configurations.configureEach { resolutionStrategy.force 'org.bouncycastle:bcprov-jdk18on:1.86' }
+    // Robolectric 4.15 (test-only) pulls guava 33.4.8 and asm 9.8, and the Gradle jacoco ant task pulls asm 9.2;
+    // align to patched releases for the Snyk findings on those test/build-time dependencies. Not shipped in the AAR.
+    configurations.configureEach {
+        resolutionStrategy.eachDependency { details ->
+            if (details.requested.group == 'com.google.guava' && details.requested.name == 'guava') {
+                details.useVersion '33.7.2-jre'
+            }
+            if (details.requested.group == 'org.ow2.asm') {
+                details.useVersion '9.11.1'
+            }
+        }
+    }
     implementation fileTree(include: ['*.jar'], dir: 'libs')
     implementation "com.android.volley:volley:$volley"
 

contentstack/src/test/java/com/contentstack/sdk/TestError.java

@@ -283,8 +283,7 @@ public void testNetworkErrorScenario() {
     public void testValidationErrorScenario() {
         HashMap<String, Object> validationErrors = new HashMap<>();
         validationErrors.put("email", "Invalid email format");
-        // deepcode ignore HardcodedPassword: test fixture value, not a real secret
-        validationErrors.put("password", "Password too short");
+        validationErrors.put("title", "Title too short");
 
         error.setErrorMessage("Validation failed");
         error.setErrorCode(422);
@@ -294,7 +293,7 @@ public void testValidationErrorScenario() {
         assertEquals("Validation error message", "Validation failed", error.getErrorMessage());
         assertEquals("Should have 2 validation errors", 2, error.getErrors().size());
         assertTrue("Should contain email error", error.getErrors().containsKey("email"));
-        assertTrue("Should contain password error", error.getErrors().containsKey("password"));
+        assertTrue("Should contain title error", error.getErrors().containsKey("title"));
     }
 }