DX | 12-08-2026 | Release by cs-raj · Pull Request #341 · contentstack/cli-plugins

cs-raj · 2026-08-12T07:27:20Z

DX | 12-08-2026 | Release

Promotes the CLI v2 plugin suite from v2-dev → development. All packages reach their GA v2.0.0 milestone.

Version Bumps

Package	Previous	New
`@contentstack/cli-asset-management`	—	1.0.0(new)
`@contentstack/apps-cli`	1.7.4	2.0.0
`@contentstack/cli-audit`	1.21.0	2.0.0
`@contentstack/cli-cm-bootstrap`	1.19.9	2.0.0
`@contentstack/cli-cm-branches`	1.8.5	2.0.0
`@contentstack/cli-bulk-operations`	1.2.4	2.0.0
`@contentstack/cli-cm-clone`	1.21.11	2.0.0
`@contentstack/cli-cm-export`	1.27.0	2.0.0
`@contentstack/cli-cm-export-to-csv`	1.12.8	2.0.0
`@contentstack/cli-cm-export-query`	1.0.7	2.0.0
`@contentstack/cli-cm-import`	1.35.0	2.0.0
`@contentstack/cli-cm-import-setup`	1.8.8	2.0.0
`@contentstack/cli-cm-migrate-rte`	1.7.4	2.0.0
`@contentstack/cli-cm-regex-validate`	1.0.3	2.0.0
`@contentstack/cli-cm-seed`	1.15.10	2.0.0
`@contentstack/cli-external-migrate`	1.0.0-alpha.7	2.0.0
`@contentstack/cli-migration`	1.12.6	2.0.0
`@contentstack/cli-variants`	1.6.2	2.0.0
`contentstack-cli-content-type`	1.5.4	2.0.0
`contentstack-cli-tsgen`	4.10.3	5.0.0

@contentstack/cli-asset-management (new package)

New Features

First release of the Contentstack Assets API adapter for export and import.
Export assets across spaces, workspaces, and asset types with chunked JSON output.
Import assets with full field mapping and workspace/space-level reconciliation.
OAuth support for authenticated asset operations.
Asset publishing with environment and locale targeting.
Query export support for CS Assets.
Retry utility for resilient API calls.

@contentstack/cli-bulk-operations

Breaking Changes

Removed the --api-version flag from cm:stacks:bulk-entries. The NRP header is now hardcoded at the SDK call site to 3.2. Any scripts or CI pipelines passing this flag must remove it — it will cause an unrecognized-flag error.

New Features

Added cm:stacks:bulk-taxonomies command for bulk taxonomy publish/unpublish operations.
Added CS Assets delete and move operations to the bulk-assets command.
Integrated progress manager UI for real-time operation feedback.
Asset count API integrated for exact pagination totals.

Fixes

Chunk CS Assets bulk delete/move requests to the 100-item API cap.
Collect all locales and deduplicate asset UIDs in bulk publish payload.
Hardened NRP header enforcement on taxonomy publish and fixed include-variants validation.

@contentstack/cli-cm-export

New Features

Detect Asset Management 2.0 via plan-check; automatically skip assets under a management token.
Global fields now exported in per-file format (one file per global field UID) instead of a single bundled file.

Fixes

Validate --module flag value before execution begins.
Remove unused @contentstack/cli-dev-dependencies package.

@contentstack/cli-cm-import

New Features

Global fields now imported from per-file format, matching the new export structure.

Fixes

Preserve env-locale pairing for AM asset publish during import.
Fix entry publish locale mapping — added local env mapping for entries as 1:1.
Validate --module flag value before execution begins.

@contentstack/cli-audit

New Features

Global fields audit updated to per-file format.

Fixes

Scope asset publish details audit to the exported stack only; prevent cross-stack bleed.
Report skipped publish details accurately when the source stack is unknown.
Fix 'detials' typo in ASSET_FIX message.

@contentstack/apps-cli

New Features

Added org plan check before asset scanning operations.

Fixes

Show login error on console and improve API key validation.
Normalize short flag consistency.

@contentstack/cli-variants

Fixes

Fix CT linking failure when an experience has empty audiences.
Make the variant-skip warning message generic (no longer hardcodes variant type).
Remove unused lodash/values and lodash/cloneDeep imports.

@contentstack/cli-cm-bootstrap

Breaking Changes

Removed the deprecated seed repo. Any bootstrap flows that referenced the old seed repository will need to be updated.

Fixes

Remove dead sampleapp branch reference.

@contentstack/cli-cm-seed

Breaking Changes

Removed deprecated stack-starter-app seed stack.

Fixes

Restore --locale hidden flag — required internally by bootstrap.

@contentstack/cli-cm-clone

Fixes

Resolve package root correctly by directory depth in the clone command.
Resolve stack-clone auth failure for non-NA regions.

@contentstack/cli-cm-import-setup

Fixes

Show backup folder path on command completion.

@contentstack/cli-cm-regex-validate

Fixes

Remove eslint-config-oclif-typescript from flat ESLint config.
Normalize short flag consistency across commands.

@contentstack/cli-migration

Breaking Changes

Removed deprecated command aliases and hidden flags.

Fixes

Normalize short flag consistency.

@contentstack/cli-cm-migrate-rte

Breaking Changes

Removed deprecated command aliases and hidden flags.

contentstack-cli-tsgen (5.0.0)

Fixes

Normalize short flag consistency.

@contentstack/cli-cm-branches

No functional changes. Version bumped to 2.0.0 as part of the GA v2 release baseline.

@contentstack/cli-cm-export-to-csv

Fixes

Fixed bulk operation integration and export-to-csv data handling.
Cleaned up stale beta version strings and broken links in README.

@contentstack/cli-cm-export-query

Fixes

Removed unused @contentstack/cli-dev-dependencies package.

contentstack-cli-content-type

New Features

Global fields now reflected in per-file format, consistent with export/import/audit changes.

Fixes

Removed stale --token-alias flag exclusions from README.

@contentstack/cli-external-migrate

Fixes

Updated short flags of external commands.
Add api_version 3.2 header assertions on scheduleEntryAction.

Cross-cutting

Security: Resolved Snyk hardcoded secret false positives in message constants across multiple packages.
Security: Resolved path traversal issue.
Auth: Show login error on console and improved API key validation across import/export flows.
CI: Normalized plugin test scripts, added tsgen coverage, and switched to per-package CI execution.
Chore: GA version bumps — dropped all -beta suffixes, bumped third-party deps to latest minor.

Fixed lint and lock file update

Fix/version bump v2

DX | 29-06-2026 | Beta Release

version bump import setup plugin

V2 beta back merge

add API key validation in import/export configurations

Fix/back merge development v2

…date, tsgen, migration, and apps-cli

…nto feat/Asset-Scanning

…rkflow

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

…gins into feat/Asset-Scanning

The ASSET_FIX message shipped with a misspelling in user-facing output. A regression test in test/unit/messages/index.test.ts guards against it and was failing. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

The private method had no callers. Asset scanning detection is already handled in import-config-handler.ts via config.planStatus['assetsScan'], which feeds assetScanningEnabled and skipAssetsPublish. Keeping a second detection path with a different data source risked drift, and its bare catch reported "not enabled" on any API error. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Feature branch for Asset scanning v2

fix rename --config-file to --config and --config to --inline-config in cm:stacks:migration

chore: GA version bumps — promote all packages from beta to stable and update third-party deps

snyk-io · 2026-08-12T07:27:40Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-12T07:28:11Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

Port release-production-plugins.yml from development branch for v2 GA, with v2-specific changes: - Trigger on main + workflow_dispatch, tag:latest - Added asset-management and bulk-operations (new in v2) - Removed bulk-publish (package does not exist in v2) - Removed duplicate apps-cli publish step (was publishing with both tag:latest and tag:beta) - Removed broken create_release step (referenced non-existent step id publish-plugins and had an incomplete shell script) Closes DX-10156 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

…release-workflows feat: add v2 production release workflow

github-actions · 2026-08-12T11:23:48Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

cs-rajand others added 30 commits June 29, 2026 18:12

Merge pull request#253from contentstack/fix/dev
e44c40b
Fixed lint and lock file update

Merge branch 'v2-dev' into fix/DX-3921
d5a2bda

lock file update
c3ba5a9

version bump
aeadaea

update pnpm lock file
d25a200

Merge branch 'v2-dev' into fix/version-bump-v2
fc8ab42

Merge pull request#254from contentstack/fix/version-bump-v2
7839998
Fix/version bump v2

Merge pull request#248from contentstack/v2-dev
8a060ba
DX | 29-06-2026 | Beta Release

version bump import setup plugin
ec47ccc

Merge pull request#255from contentstack/fix/version-bump--v2
366d09a
version bump import setup plugin

Merge branch 'v2-dev' into fix/DX-3921
c155a00

Merge pull request#256from contentstack/v2-beta
5bf743f
V2 beta back merge

fix: show login error on console and improve API key validation
9fb2e2e
add API key validation in import/export configurations

Merge branch 'main' into fix/back-merge-development-v2
c807cd1

update pnpm lock file
1c112d3

Merge pull request#259from contentstack/fix/back-merge-development-v2
528c614
Fix/back merge development v2

Merge branch 'v2-dev' into fix/dx-7893-login-error-validate-api-key
e406e74

pnpm lock update
1184291

fix(flags): normalize short flag consistency across cli-cm-regex-vali…
f7a7f7d
…date, tsgen, migration, and apps-cli

fixed org plan check feature
4040d12

removed console logs
e8c4bcd

updated short flags of external commands
49de3be

Merge branch 'feat/DX-93-72' of github.com:contentstack/cli-plugins i…
ce03768
…nto feat/Asset-Scanning

updated unit test workflow
2f2920c

updated unit test workflow
06acfed

updated unit test workflow and added parallel execution
8d35697

fixed test case and removed parallel test execution
dc6ac5e

fixed seed tests
28f6058

Removed character flag from the command and removed seed test from wo…
fb610bf
…rkflow

added asset scanning plan check
f65ee46

naman-contentstackand others added 14 commits August 6, 2026 13:32

style(bulk-operations): fix prettier lint error in bulk-assets imports
3c0d009
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

merged changes from v1
697b187

Merge branch 'feat/Asset-Scanning' of github.com:contentstack/cli-plu…
731fac3
…gins into feat/Asset-Scanning

updated lock file
1520e6e

fix(audit): correct 'detials' typo in ASSET_FIX message
355d400
The ASSET_FIX message shipped with a misspelling in user-facing output. A regression test in test/unit/messages/index.test.ts guards against it and was failing. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Merge pull request#294from contentstack/feat/Asset-Scanning
b268a6d
Feature branch for Asset scanning v2

Merge branch 'v2-dev' into fix/DX-3921
6a8339a

Merge pull request#251from contentstack/fix/DX-3921
524937a
fix rename --config-file to --config and --config to --inline-config in cm:stacks:migration

Merge branch 'v2-dev' into chore/ga-version-bumps
f403c35

management sdk version bump consistent in bulk operation
c18a525

readme updates
0a936d0

readme updates
f900b68

Merge pull request#338from contentstack/chore/ga-version-bumps
3c5300b
chore: GA version bumps — promote all packages from beta to stable and update third-party deps

cs-raj requested review from a team as code owners August 12, 2026 07:27

harshitha-cstk previously approved these changes Aug 12, 2026
View reviewed changes

abhishek-ezhava-cstk previously approved these changes Aug 12, 2026
View reviewed changes

netrajpatel approved these changes Aug 12, 2026
View reviewed changes

netrajpatel requested changes Aug 12, 2026
View reviewed changes

Comment thread.github/workflows/release-v2-beta-plugins.yml
Comment thread.github/workflows/release-v2-beta-plugins.yml

cs-rajand others added 2 commits August 12, 2026 16:15

Merge pull request#343from contentstack/fix/DX-10156-v2-production-…
689edb6
…release-workflows feat: add v2 production release workflow

cs-raj dismissed stale reviews from abhishek-ezhava-cstk and harshitha-cstk via 689edb6August 12, 2026 11:23

reeshika-h approved these changes Aug 12, 2026
View reviewed changes

netrajpatel approved these changes Aug 12, 2026
View reviewed changes

cs-raj merged commit 57bac9f into developmentAug 12, 2026
9 of 12 checks passed

Navigation Menu

Uh oh!

DX | 12-08-2026 | Release - #341

DX | 12-08-2026 | Release#341
cs-raj merged 1125 commits into
developmentfrom
v2-dev

cs-raj commented Aug 12, 2026•
edited
Loading

Uh oh!

snyk-ioBot commented Aug 12, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Aug 12, 2026

Uh oh!

Uh oh!

Uh oh!

github-actionsBot commented Aug 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Uh oh!

Conversation

cs-raj commented Aug 12, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!