fix: remove unused @contentstack/cli-dev-dependencies from export, query-export, variants by cs-raj · Pull Request #336 · contentstack/cli-plugins

cs-raj · 2026-08-05T10:27:25Z

Package is declared as devDependency in all three but never imported anywhere in source or test files.

…ery-export, variants Package is declared as devDependency in all three but never imported anywhere in source or test files. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

snyk-io · 2026-08-05T10:27:40Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-05T10:28:02Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

github-actions · 2026-08-05T10:33:09Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

github-actions · 2026-08-05T10:42:06Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	0	121	25	✅ Passed
🟡 Medium Severity	2	62	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (with fixes)	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	0	15 / 30 days	✅ Passed
🟠 High	0	1	30 / 120 days	⚠️ Warning
🟡 Medium	2	1	90 / 365 days	❌ Failed / ⚠️ Warning
🔵 Low	0	0	180 / 365 days	✅ Passed

🟡 Medium Severity - SLA Breached Issues (with fixes)

Showing 2 issue(s) that have exceeded the 90-day SLA threshold:

Improper Validation of Specified Index, Position, or Offset in Input
- ID: SNYK-JS-UUID-16133035
- Package: uuid@8.3.2
- Published: 104 days ago (SLA: 90 days)
- CVSS Score: 6.3
- CVE: CVE-2026-41907
Improper Validation of Specified Index, Position, or Offset in Input
- ID: SNYK-JS-UUID-16133035
- Package: uuid@8.3.2
- Published: 104 days ago (SLA: 90 days)
- CVSS Score: 6.3
- CVE: CVE-2026-41907

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 121
Medium without fixes: 62
Low without fixes: 0

❌ BUILD FAILED - Security checks failed

Please review and fix the security vulnerabilities before merging.

github-actions · 2026-08-05T10:54:19Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

contentstack-audit, contentstack-import, and contentstack-migrate-rte all import from fancy-test in their test files but had no explicit dep. When cli-dev-dependencies was dropped, fancy-test lost its hoisted path and CI started resolving the orphaned fancy-test@3 snapshot instead. Pin to ^2.0.0 (resolves 2.0.42) to restore the v2 API the tests expect. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

github-actions · 2026-08-05T12:47:58Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	15 / 30 days	✅ Passed
🟠 High	0	30 / 120 days	✅ Passed
🟡 Medium	1	90 / 365 days	⚠️ Warning
🔵 Low	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

fix: remove unused @contentstack/cli-dev-dependencies from export, query-export, variants

fix: remove unused @contentstack/cli-dev-dependencies from export, qu…
720782f
…ery-export, variants Package is declared as devDependency in all three but never imported anywhere in source or test files. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

cs-raj requested a review from a team as a code owner August 5, 2026 10:27

netrajpatel previously approved these changes Aug 5, 2026
View reviewed changes

fix: restore missing indentation after devDependency removal
a66a0be
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

cs-raj dismissed netrajpatel’s stale review via a66a0beAugust 5, 2026 10:32

fix: regenerate lockfile after removing cli-dev-dependencies
765c281
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

netrajpatel previously approved these changes Aug 5, 2026
View reviewed changes

lockfile update
9ee1163

cs-raj dismissed netrajpatel’s stale review via 9ee1163August 5, 2026 10:53

netrajpatel previously approved these changes Aug 5, 2026
View reviewed changes

cs-raj mentioned this pull request Aug 5, 2026
chore: GA version bumps — promote all packages from beta to stable and update third-party deps #338
Merged
4 tasks

cs-raj dismissed netrajpatel’s stale review via c2d29c0August 5, 2026 12:47

aniket-shikhare-cstk approved these changes Aug 5, 2026
View reviewed changes

cs-raj merged commit 828255a into v2-devAug 5, 2026
11 checks passed

cs-raj deleted the fix/drop-cli-dev-dependencies branch August 5, 2026 13:02

naman-contentstack pushed a commit that referenced this pull request Aug 7, 2026
Merge pull request#336from contentstack/fix/drop-cli-dev-dependencies
2cbdd81
fix: remove unused @contentstack/cli-dev-dependencies from export, query-export, variants

Navigation Menu

Uh oh!

fix: remove unused @contentstack/cli-dev-dependencies from export, query-export, variants - #336

fix: remove unused @contentstack/cli-dev-dependencies from export, query-export, variants#336
cs-raj merged 5 commits into
v2-devfrom
fix/drop-cli-dev-dependencies

cs-raj commented Aug 5, 2026

Uh oh!

snyk-ioBot commented Aug 5, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Aug 5, 2026

Uh oh!

github-actionsBot commented Aug 5, 2026

Uh oh!

github-actionsBot commented Aug 5, 2026

Uh oh!

github-actionsBot commented Aug 5, 2026

Uh oh!

github-actionsBot commented Aug 5, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

cs-raj commented Aug 5, 2026

Uh oh!

snyk-ioBot commented Aug 5, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actionsBot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

🟡 Medium Severity - SLA Breached Issues (with fixes)

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

snyk-ioBot commented Aug 5, 2026•
edited
Loading