From 8a56e40eaf39ebb721a416d6cd2fb31862f47af0 Mon Sep 17 00:00:00 2001
From: Aravind Kumar <aravind.kumar@contentstack.com>
Date: Sun, 2 Aug 2026 17:43:49 +0530
Subject: [PATCH 1/2] sca-scan.yml

---
 .github/workflows/sca-scan.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/sca-scan.yml b/.github/workflows/sca-scan.yml
index 2307d48..79b6557 100644
--- a/.github/workflows/sca-scan.yml
+++ b/.github/workflows/sca-scan.yml
@@ -5,6 +5,9 @@ on:
 jobs:
   security-sca:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@master
       - name: Run Snyk to check for vulnerabilities

From 1cbdcc4c4ba74e7ce8836a38fe874a7d545e33a4 Mon Sep 17 00:00:00 2001
From: reeshika-h <reeshika.hosmani@contentstack.com>
Date: Mon, 3 Aug 2026 15:30:11 +0530
Subject: [PATCH 2/2] chore: bump version to 5.5.1 and update dependencies in
 package.json and package-lock.json

---
 CHANGELOG.md      |  7 +++++++
 package-lock.json | 12 ++++++------
 package.json      |  4 ++--
 3 files changed, 15 insertions(+), 8 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 94a8ac8..84f53cb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+### Version: 5.5.1
+#### Date: Aug-03-2026
+Fix: Bump `@contentstack/core` to `^1.5.0`:
+- Retry of transient network-level errors (`ECONNABORTED`, `ETIMEDOUT`, `ECONNRESET`, `EPIPE`, `EAI_AGAIN`) by default when there is no HTTP response
+- Distinct classification of request timeouts instead of a generic `UNKNOWN_ERROR`
+- Default `httpAgent`/`httpsAgent` keep-alive connection agents in Node environments
+
 ### Version: 5.5.0
 #### Date: Jul-27-2026
 Enhancement: Entry variants support an optional branch name as the second argument to `variants()` on `Entry` and `Entries`. When provided, the branch is sent as the `branch` request header together with `x-cs-variant-uid`. Existing `variants(uid)` and `variants(uids)` calls remain backward compatible. Added unit and API tests for variant + branch requests.
diff --git a/package-lock.json b/package-lock.json
index 45bc286..7533a5c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,15 +1,15 @@
 {
   "name": "@contentstack/delivery-sdk",
-  "version": "5.5.0",
+  "version": "5.5.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@contentstack/delivery-sdk",
-      "version": "5.5.0",
+      "version": "5.5.1",
       "license": "MIT",
       "dependencies": {
-        "@contentstack/core": "^1.4.1",
+        "@contentstack/core": "^1.5.0",
         "@contentstack/utils": "^1.9.1",
         "axios": "^1.18.1",
         "humps": "^2.0.1"
@@ -540,9 +540,9 @@
       "license": "MIT"
     },
     "node_modules/@contentstack/core": {
-      "version": "1.4.1",
-      "resolved": "https://registry.npmjs.org/@contentstack/core/-/core-1.4.1.tgz",
-      "integrity": "sha512-QfLa8WUwquWSwvF8EltLyzQTkeNE2I9b9PBkPe21w0d5PnHOagxFzDNCYN4VO/zuJ52sNtKLFIFUcvLsOPk9ww==",
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/@contentstack/core/-/core-1.5.0.tgz",
+      "integrity": "sha512-GTNjPYqi49EFpdGp+6UGdY55OoM48Rc7UyCUTYPdzcmrvYlmiL0JKqyozShEVaqrDMdaNBQZu8PRvRA7TpDVNA==",
       "license": "MIT",
       "dependencies": {
         "axios": "^1.18.1",
diff --git a/package.json b/package.json
index 4e6e7ff..2f01820 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@contentstack/delivery-sdk",
-  "version": "5.5.0",
+  "version": "5.5.1",
   "type": "module",
   "license": "MIT",
   "engines": {
@@ -47,7 +47,7 @@
     "prerelease": "npm run test:all && npm run validate:all"
   },
   "dependencies": {
-    "@contentstack/core": "^1.4.1",
+    "@contentstack/core": "^1.5.0",
     "@contentstack/utils": "^1.9.1",
     "axios": "^1.18.1",
     "humps": "^2.0.1"