Uh oh!
There was an error while loading. Please reload this page.
chore: GA version bumps — promote all packages from beta to stable and update third-party deps - #338
Conversation
…minor Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
There was a problem hiding this comment.
Pull request overview
This PR prepares the cli-plugins monorepo for CLI v2 GA by promoting internal @contentstack/* packages from beta to stable versions and updating third-party dependencies/READMEs accordingly across multiple plugins.
Changes:
- Promotes plugin package versions from
*-beta.*to stable1.0.0/2.0.0/5.0.0and updates cross-plugin@contentstack/*dependency pins to stable ranges. - Bumps third-party dependencies/devDependencies (notably
@oclif/*,eslint*,fs-extra,uuid, etc.) across packages. - Regenerates/updates several oclif READMEs and updates root
pnpmtooling version.
Reviewed changes
Copilot reviewed 34 out of 35 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| packages/contentstack-variants/package.json | Promotes @contentstack/cli-variants to 2.0.0 and updates core/internal deps to stable. |
| packages/contentstack-seed/README.md | Updates generated command docs/usage for GA release. |
| packages/contentstack-seed/package.json | Promotes @contentstack/cli-cm-seed to 2.0.0 and updates internal/third-party deps. |
| packages/contentstack-query-export/package.json | Promotes @contentstack/cli-cm-export-query to 2.0.0 and updates internal/oclif deps. |
| packages/contentstack-migration/README.md | Updates generated docs/version banner for GA and removes duplicated sections. |
| packages/contentstack-migration/package.json | Promotes @contentstack/cli-migration to 2.0.0 and bumps lint/oclif tooling. |
| packages/contentstack-migrate-rte/package.json | Promotes @contentstack/cli-cm-migrate-rte to 2.0.0 and bumps oclif/eslint deps. |
| packages/contentstack-import/README.md | Updates generated version banner to GA. |
| packages/contentstack-import/package.json | Promotes @contentstack/cli-cm-import to 2.0.0 and updates internal/third-party deps. |
| packages/contentstack-import-setup/README.md | Updates generated version banner to GA. |
| packages/contentstack-import-setup/package.json | Promotes @contentstack/cli-cm-import-setup to 2.0.0 and bumps tooling deps. |
| packages/contentstack-external-migrate/package.json | Promotes @contentstack/cli-external-migrate to 2.0.0 and bumps runtime/dev deps. |
| packages/contentstack-export/README.md | Updates generated version banner to GA. |
| packages/contentstack-export/package.json | Promotes @contentstack/cli-cm-export to 2.0.0 and updates internal/tooling deps. |
| packages/contentstack-export-to-csv/package.json | Promotes @contentstack/cli-cm-export-to-csv to 2.0.0 and bumps deps. |
| packages/contentstack-content-type/README.md | Adds/updates generated command documentation for GA. |
| packages/contentstack-content-type/package.json | Promotes contentstack-cli-content-type to 2.0.0 and bumps tooling deps. |
| packages/contentstack-clone/README.md | Updates generated version banner to GA. |
| packages/contentstack-clone/package.json | Promotes @contentstack/cli-cm-clone to 2.0.0 and updates internal/tooling deps. |
| packages/contentstack-cli-tsgen/package.json | Promotes contentstack-cli-tsgen to 5.0.0 and bumps deps for GA alignment. |
| packages/contentstack-cli-cm-regex-validate/README.md | Expands/updates generated command docs. |
| packages/contentstack-cli-cm-regex-validate/package.json | Promotes @contentstack/cli-cm-regex-validate to 2.0.0 and bumps deps. |
| packages/contentstack-bulk-operations/README.md | Updates generated bulk-operations docs and examples for GA. |
| packages/contentstack-bulk-operations/package.json | Promotes @contentstack/cli-bulk-operations to 2.0.0 and bumps dev tooling deps. |
| packages/contentstack-branches/README.md | Updates generated version banner to GA. |
| packages/contentstack-branches/package.json | Promotes @contentstack/cli-cm-branches to 2.0.0 and bumps deps. |
| packages/contentstack-bootstrap/README.md | Updates generated version banner to GA. |
| packages/contentstack-bootstrap/package.json | Promotes @contentstack/cli-cm-bootstrap to 2.0.0 and bumps deps. |
| packages/contentstack-audit/README.md | Updates generated version banner to GA. |
| packages/contentstack-audit/package.json | Promotes @contentstack/cli-audit to 2.0.0 and bumps deps. |
| packages/contentstack-asset-management/README.md | Minor README formatting/line alignment update. |
| packages/contentstack-asset-management/package.json | Promotes @contentstack/cli-asset-management to 1.0.0 and bumps deps. |
| packages/contentstack-apps-cli/package.json | Promotes @contentstack/apps-cli to 2.0.0 and bumps tooling deps. |
| package.json | Updates root pnpm devDependency and packageManager pin. |
| .talismanrc | Adds checksums for updated README files. |
Suppressed comments (4)
packages/contentstack-content-type/README.md:172
- This USAGE block has an extra
|([-k <value> | | -a <value>]split across lines), which makes the generated syntax invalid/unclear.
$ csdx content-type:diagram --output <value> --direction portrait|landscape --type svg|dot [-k <value> | | -a
<value>]
packages/contentstack-content-type/README.md:204
- The USAGE line contains a duplicated pipe (
[-k <value> | | -a <value>]), which is malformed CLI syntax in the docs.
$ csdx content-type:list [-k <value> | | -a <value>] [--order title|modified]
packages/contentstack-bulk-operations/README.md:202
- The "See code" link URL is missing the
packages/contentstack-bulk-operations/path segment and points atblob/v2.0.0, which makes the link incorrect/brittle. Align it with the repo's standardblob/main/packages/...links.
_See code: [src/commands/cm/stacks/bulk-entries.ts](https://github.com/contentstack/cli-plugins/blob/v2.0.0/src/commands/cm/stacks/bulk-entries.ts)_
packages/contentstack-bulk-operations/README.md:266
- The "See code" link URL is missing the
packages/contentstack-bulk-operations/path segment and points atblob/v2.0.0, which makes the link incorrect/brittle. Align it with the other READMEs.
_See code: [src/commands/cm/stacks/bulk-taxonomies.ts](https://github.com/contentstack/cli-plugins/blob/v2.0.0/src/commands/cm/stacks/bulk-taxonomies.ts)_
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
GitHub Actions workflow pins pnpm@10.28.0 via action-setup; bumping packageManager to 10.34.4 caused ERR_PNPM_BAD_PM_VERSION in CI. Keep packageManager aligned with the workflow config. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
There was a problem hiding this comment.
Reviewed against v2-dev. Version math is correct — all ~20 packages promoted beta → stable (2.0.0, with cli-asset-management→1.0.0 and tsgen→5.0.0), no broken internal/cross-repo dependency ranges, third-party bumps minor/patch only. A few things on top of Copilot's comments (all 4 of which are valid — please also fix those).
Blocking
pnpm-lock.yamlis out of sync →tsgen-integration-testwill fail. The lockfile is unchanged fromv2-dev(still 1272.0.0-beta.*refs) whilepackage.jsonspecifiers moved to~2.0.0and updated third-party ranges. That workflow runs on every PR withpnpm install --frozen-lockfile(pnpm 10.28.0), which errors on the mismatch. Runpnpm installand commit the regenerated lock. (Side note: the.talismanrcchecksum forpnpm-lock.yamlwas bumped but doesn't match the committed lockfile — looks like the regen was done locally but the lock wasn't committed.)
Should fix
- Inconsistent pin:
cli-bulk-operations→@contentstack/cli-asset-management@"1.0.0"(exact) while everything else uses~1.0.0. Recommend~1.0.0.
README nits not already covered by Copilot
contentstack-cli-cm-regex-validate/README.md: stale example…/1.2.1 … node-v20.8.0(should be2.0.0/node-v22), and the License badge points at the old standalone repo.contentstack-content-type/README.md: the diagram image (line 31) still links to the oldcontentstack-cli-content-typerepo. (Copilot's pipe comments on lines 172/204 are separate and also worth fixing — a freshoclif readmeregen should clear both those and the bulk-operations link paths in one go.)
- Regenerate all plugin READMEs via oclif readme - Fix bulk-operations: add repositoryPrefix to oclif config, bump cli-asset-management pin to ~1.0.0 - Fix content-type: remove phantom token-alias from exclusive flag arrays in audit/compare/details/diagram/list commands; fixes double-pipe in USAGE strings - Fix content-type README: update diagram image link to monorepo path - Fix regex-validate README: update static version example to 2.0.0/node-v22 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
cs-raj
commented
Aug 5, 2026
Hi @aniket-shikhare-cstk, thanks for the thorough review! Here's the status on each item. cc @netrajpatel All "should fix" and README nit items are resolved in the latest commit (
Lockfile blocker — this is currently unresolvable on our end. The |
- apps-cli: update usage example from 2.0.0-beta.2/node-v18 to 2.0.0/node-v22 - export-to-csv: update usage example from 2.0.0-beta.9 to 2.0.0 - cli-tsgen: remove @beta from install command, update migration note to 5.0.0 - regex-validate: fix License badge to point to monorepo path Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
aniket-shikhare-cstk
commented
Aug 5, 2026
Thanks @cs-raj — fixes all confirmed on my end, and agreed the lockfile is just publish-ordering. Your plan works for me. |
e757c83🔒 Security Scan Results
⏱️ SLA Breach Summary
✅ BUILD PASSED - All security checks passed |
🔒 Security Scan Results
⏱️ SLA Breach Summary
✅ BUILD PASSED - All security checks passed |
🔒 Security Scan Results
⏱️ SLA Breach Summary
✅ BUILD PASSED - All security checks passed |
🔒 Security Scan Results
⏱️ SLA Breach Summary
✅ BUILD PASSED - All security checks passed |
Uh oh!
There was an error while loading. Please reload this page.
chore: GA version bumps — promote all packages from beta to stable and update third-party deps
Overview
This PR prepares all packages in the `cli-plugins` monorepo for the General Availability (GA) release of CLI v2. It does two things:
Package Version Promotions (self-versions)
Internal `@contentstack/*` Dependency Updates
All cross-package `@contentstack/*` dependency references have been updated from their individual beta pins to stable GA versions:
Third-Party Dependency Bumps (minor/patch only)
`@oclif/*` ecosystem
ESLint ecosystem
Runtime dependencies
Type definitions & test utilities
Build tooling
README Updates
READMEs are auto-generated by oclif (`oclif readme`). Changes across affected packages reflect:
Affected: `cli-audit`, `cli-cm-export`, `cli-cm-import`, `cli-cm-bootstrap`, `cli-cm-branches`, `cli-cm-clone`, `cli-cm-import-setup`, `cli-cm-seed`, `cli-cm-regex-validate`, `cli-migration`, `cli-asset-management`, `contentstack-content-type`.
What Was NOT Changed
Related PRs
Test Plan
🤖 Generated with Claude Code