[Snyk] Upgrade @contentstack/utils from 1.6.3 to 1.9.0

[shafeeqd959]

Snyk has created this PR to upgrade @contentstack/utils from 1.6.3 to 1.9.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.

• The recommended version was released a month ago.

Release notes

Package name: @contentstack/utils

• 1.9.0 - 2026-03-30
  

  What's Changed

  • back merge by @ harshithad0703 in #259
  • docs: add AGENTS.md, Cursor rules, and agent skills (DX-5367) by @ harshitha-cstk in #260
  • Added variant utility by @ sunil-lakshman in #261
  • staging PR by @ harshitha-cstk in #262
  • DX | 30-03-2026 | Release by @ harshitha-cstk in #263

  Full Changelog: v1.8.0...v1.9.0

• 1.8.0 - 2026-03-02
  

  What's Changed

  • fix: implement logic to fold nested lists into their preceding list i… by @ harshithad0703 in #256

  Full Changelog: 1.7.1...v1.8.0

• 1.7.1 - 2026-02-23
  

  What's Changed

  • fix: guard against null/undefined in getTag function by @ nadeem-cs in #251
  • Development by @ nadeem-cs in #252

  Full Changelog: v1.7.0...1.7.1

• 1.7.0 - 2026-02-02
  

  What's Changed

  • docs: add contributing guidelines for project by @ nadeem-cs in #246
  • [VB797] [LowercaseLocale] Added option in addTags to disable lowercasing of locale by @ csAyushDubey in #245

  Full Changelog: v1.6.3...v1.7.0

• 1.6.3 - 2025-12-08
  

  What's Changed

  • chore: release version 1.6.3 with endpoint refactor, updated build pr… by @ nadeem-cs in #242

  Full Changelog: v1.6.2...v1.6.3

from @contentstack/utils GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[github-actions]

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	1	10	✅ Passed
🟠 High Severity	11	4	25	✅ Passed
🟡 Medium Severity	14	16	500	✅ Passed
🔵 Low Severity	0	2	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (with fixes)	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	1	15 / 30 days	⚠️ Warning
🟠 High	0	1	30 / 120 days	⚠️ Warning
🟡 Medium	0	3	90 / 365 days	⚠️ Warning
🔵 Low	0	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

• Critical without fixes: 1
• High without fixes: 4
• Medium without fixes: 16
• Low without fixes: 2

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

[abhishek-ezhava-cstk]

Closing: superseded. `@contentstack/utils` is already at ^1.9.1 on master, ahead of the 1.9.0 proposed here.

Also closed as secret-scan hygiene — the commit message on this branch embeds a Snyk project URL that TruffleHog flags as a SnykKey (false positive; it is a dashboard project ID, not an API key).