feat!: Contentstack CLI v2 GA — production release by cs-raj · Pull Request #2701 · contentstack/cli

cs-raj · 2026-08-12T12:00:38Z

Summary

This PR merges the development branch into main, promoting Contentstack CLI v2 from beta to General Availability. The v2 production release pipeline goes live and all beta-only infrastructure is removed.

Jira Epic: DX (CLI v2 Post-Release Stabilization)
Note: The final packages/contentstack/package.json version bump (dep ranges ~2.0.0-beta.X → 2.0.0) will be committed to development as the last step before this PR is merged.

What's in this PR

Release Infrastructure

Change	Detail
Added production release pipeline	`release-production-pipeline.yml` → triggers on push to `main`; calls `release-production-platform-plugins.yml` then `release-production-core.yml` with `secrets: inherit`
Removed beta release workflows	`release.yml`, `release-v2-beta-core.yml`, `release-v2-beta-platform-plugins.yml` deleted from development
All npm publishes tagged `latest`	v2 is the new `latest`; v1 releases will use `v1` dist-tag on the `v1-legacy` branch

Breaking Changes

Refer to MIGRATION.md for the full guide. Key breaking changes:

@contentstack/cli-launch is no longer bundled. It is now an opt-in plugin. Users must install it manually: csdx plugins:install @contentstack/cli-launch. The CLI will suggest the install command when a Launch command is invoked without the plugin present.
Short flags removed from auth and config commands that conflicted with oclif internals.
Dead --branch flag removed from auth:tokens:add.
auth:tokens namespace now has its own help text; auth:tokens:list command added.
Third-party deps bumped to latest minor (no known breaking surface but lockfile changed significantly).

New Features

`auth:tokens` namespace + `auth:tokens:list`

csdx auth:tokens now shows namespace-level help listing all token subcommands.
csdx auth:tokens:list lists all stored management and delivery tokens.

Opt-in launch plugin UX

When a launch:* command is run without the plugin installed, the CLI prints a clear warning and suggests the install command (csdx plugins:install @contentstack/cli-launch).
Documented in the migration guide and root README.

`readGlobalFieldSchemas` utility

New utility function in @contentstack/cli-utilities for reading per-file global field schemas, with globalfields.json added to the ignore list.
bulk-operations registered as a progress-supported module.

Org plan check + endpoint auto-update

CLI config now performs an org plan check on startup and auto-updates region endpoints when the org plan changes.

Bug Fixes

Fix	Detail
Region display for custom regions	`csdx config:get:region` now correctly shows the AM endpoint for custom regions
Unified `@contentstack/cli-utilities` loading	Prevents multiple instances of the module being loaded in the monorepo — fixes subtle state bugs
`brace-expansion` CVE	Patched via override to `^4.0.5`
Mixed logging	Console output now consistently routes through the logger
Flags conflict	Removed short flags (`-u`, `-t`, etc.) from auth/config commands that shadowed oclif built-ins

Documentation

Doc	Change
Root `README.md`	Complete rewrite — concise usage, bundled-plugin table with docs links, installable-plugin table
`MIGRATION.md`	11+ breaking changes added; launch opt-in requirement documented; dead flag notes
Migration guide migration note	Updated `2.x.x-beta` → `2.x` everywhere

Packages Released

All packages below publish to the latest dist-tag on npm when this merges and the pipeline runs.

Package	Version
`@contentstack/cli-auth`	`2.0.0-beta.17` → `2.0.0`
`@contentstack/cli-config`	`2.0.0-beta.15` → `2.0.0`
`@contentstack/cli-command`	`2.0.0-beta.11` → `2.0.0`
`@contentstack/cli-utilities`	`2.0.0-beta.12` → `2.0.0`
`@contentstack/cli-cm-import`	`2.0.0-beta.25` → `2.0.0`
`@contentstack/cli-cm-export`	`2.0.0-beta.25` → `2.0.0`
`@contentstack/cli-cm-seed`	`2.0.0-beta.25` → `2.0.0`
`@contentstack/cli-cm-bootstrap`	`2.0.0-beta.25` → `2.0.0`
`@contentstack/cli-cm-branches`	`2.0.0-beta.11` → `2.0.0`
`@contentstack/cli-cm-clone`	`2.0.0-beta.26` → `2.0.0`
`@contentstack/cli-cm-export-to-csv`	`2.0.0-beta.12` → `2.0.0`
`@contentstack/cli-cm-import-setup`	`2.0.0-beta.19` → `2.0.0`
`@contentstack/cli-migration`	`2.0.0-beta.17` → `2.0.0`
`@contentstack/cli-audit`	`2.0.0-beta.16` → `2.0.0`
`@contentstack/cli-bulk-operations`	`2.0.0-beta.5` → `2.0.0`

Pre-merge Checklist

All open PRs targeting development are merged
fix/DX-10156-remove-beta-workflows (chore: remove beta release workflows from development #2700) merged into development
Final step: version bump packages/contentstack/package.json — update dep ranges from ~2.0.0-beta.X → 2.0.0 and commit to development
pnpm lockfile up-to-date on development
main branch protection rules reviewed (pipeline will auto-trigger on merge)
npm NPM_TOKEN secret available in repo Actions secrets
v1-legacy branch release workflow (v1-legacy trigger + tag: v1) is in place before merging this PR to avoid accidental latest overwrite from v1 hotfixes
Post-merge: verify npm install -g @contentstack/cli installs v2 (check csdx --version)
Post-merge: verify npm install -g @contentstack/cli@v1 still works for v1 users

Fix/back merge v2

DX | 06-04-2026 | Release v2

back merge

…use test command only

…prove error handling in auth-handler tests

Back Merge main to v2-beta

…use test command only

…prove error handling in auth-handler tests

Back merge main to v2-beta

Back merge v2 dev

update: replace .cursor commands/rules/skills with AGENTS + skills

chore: version bump

snyk-io · 2026-08-12T12:00:51Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-12T12:01:11Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	2	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 2
Low without fixes: 0

✅ BUILD PASSED - All security checks passed

Final version bump to 2.0.0 will be done as the last step before merging development into main. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Replace 2.0.0-beta.X ranges with matching v1 versions from v1-legacy for all shared packages. cli-bulk-operations left at ^2.0.0-beta.5 as it has no v1 equivalent. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

…tstack-version revert: restore @contentstack/cli version to 1.67.0

github-actions · 2026-08-12T12:15:59Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	2	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 2
Low without fixes: 0

✅ BUILD PASSED - All security checks passed

v1 dep versions broke the build — source code imports v2-only APIs (e.g. loadChalk from cli-utilities). Keep version at 1.67.0 but dep ranges must stay at ~2.0.0-beta.X to match the v2 source. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Rolls back the premature 2.0.0 bump. Final version bump will be done as the last step before merging development into main. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

lock file update

github-actions · 2026-08-12T12:28:00Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	2	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 2
Low without fixes: 0

✅ BUILD PASSED - All security checks passed

update sca scan yaml file

github-actions · 2026-08-12T12:35:02Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	2	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 2
Low without fixes: 0

✅ BUILD PASSED - All security checks passed

harshitha-cstkand others added 30 commits April 6, 2026 13:42

version bump
38d5158

Merge pull request#2514from contentstack/fix/back-merge-v2
32ab0d1
Fix/back merge v2

Merge pull request#2513from contentstack/v2-dev
4256a2b
DX | 06-04-2026 | Release v2

Merge pull request#2516from contentstack/v2-beta
edd55fa
back merge

Back merge main to v2-beta
82bfb95

fix: lock file update
17a0106

Fix: added lint script in the root package
e20c6b6

Removed production workflows and changed unit test cases workflow to …
9a11f31
…use test command only

fix rate limit test merge changes
a4392f5

Refactor test file paths to use relative paths for config.json and im…
bcc8cd7
…prove error handling in auth-handler tests

fix: removed override
593fd05

Skipping utilities test
d0341ac

Merge pull request#2518from contentstack/fix/back-merge
4531252
Back Merge main to v2-beta

Back merge main to v2-beta
e4ae378

fix: lock file update
3116816

Fix: added lint script in the root package
db39b2a

Removed production workflows and changed unit test cases workflow to …
326fa14
…use test command only

fix rate limit test merge changes
ea0515b

Refactor test file paths to use relative paths for config.json and im…
e9dcb40
…prove error handling in auth-handler tests

fix: removed override
6010c7b

Skipping utilities test
0b0893d

Merge branch 'main' into v2-beta
e79f3d8

Merge pull request#2524from contentstack/fix/back-merge-2
7de384b
Back merge main to v2-beta

Merge branch 'v2-beta' into v2-dev
83fa440

chore: dependency version bump
fb005a9

Merge pull request#2525from contentstack/fix/back-merge-v2-dev
4f34ddc
Back merge v2 dev

update: replace .cursor commands/rules/skills with AGENTS + skills
b6af77f

Merge pull request#2527from contentstack/update/DX-6057
77fbdd2
update: replace .cursor commands/rules/skills with AGENTS + skills

chore: version bump
18ba0cb

Merge pull request#2529from contentstack/version_bump
bfa155c
chore: version bump

cs-raj requested a review from a team as a code owner August 12, 2026 12:00

cs-raj mentioned this pull request Aug 12, 2026
feat!: Contentstack CLI Plugins v2 GA — production release contentstack/cli-plugins#345
Merged
10 tasks

cs-rajand others added 3 commits August 12, 2026 17:41

revert: restore @contentstack/cli version to 1.67.0
65692e0
Final version bump to 2.0.0 will be done as the last step before merging development into main. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Merge pull request#2702from contentstack/fix/DX-10156-revert-conten…
5c56cd4
…tstack-version revert: restore @contentstack/cli version to 1.67.0

cs-rajand others added 5 commits August 12, 2026 17:49

lock file update
1ee7549

revert: restore @contentstack/cli version to 2.0.0-beta.30
be3c157
Rolls back the premature 2.0.0 bump. Final version bump will be done as the last step before merging development into main. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

lockfile update
54e8113

Merge pull request#2703from contentstack/fix/lockfile
6d1fa37
lock file update

harshitha-cstk previously approved these changes Aug 12, 2026
View reviewed changes

reeshika-h previously approved these changes Aug 12, 2026
View reviewed changes

OMpawar-21 previously approved these changes Aug 12, 2026
View reviewed changes

netrajpatel previously approved these changes Aug 12, 2026
View reviewed changes

cs-raj added 2 commits August 12, 2026 18:02

update sca scan yaml file
94f1135

Merge pull request#2704from contentstack/fix/workflow
bfec0d9
update sca scan yaml file

cs-raj dismissed stale reviews from netrajpatel, OMpawar-21, reeshika-h, and harshitha-cstk via bfec0d9August 12, 2026 12:34

naman-contentstack approved these changes Aug 12, 2026
View reviewed changes

maheshmotkar-cs approved these changes Aug 12, 2026
View reviewed changes

OMpawar-21 approved these changes Aug 12, 2026
View reviewed changes

netrajpatel approved these changes Aug 12, 2026
View reviewed changes

cs-raj merged commit 40f9146 into mainAug 12, 2026
10 checks passed

Navigation Menu

Uh oh!

feat!: Contentstack CLI v2 GA — production release - #2701

feat!: Contentstack CLI v2 GA — production release#2701
cs-raj merged 831 commits into
mainfrom
development

cs-raj commented Aug 12, 2026•
edited
Loading

Uh oh!

snyk-ioBot commented Aug 12, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Aug 12, 2026

Uh oh!

github-actionsBot commented Aug 12, 2026

Uh oh!

github-actionsBot commented Aug 12, 2026

Uh oh!

github-actionsBot commented Aug 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Uh oh!

Conversation

cs-raj commented Aug 12, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

What's in this PR

Release Infrastructure

Breaking Changes

New Features

auth:tokens namespace + auth:tokens:list

Opt-in launch plugin UX

readGlobalFieldSchemas utility

Org plan check + endpoint auto-update

Bug Fixes

Documentation

Packages Released

Pre-merge Checklist

Uh oh!

snyk-ioBot commented Aug 12, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actionsBot commented Aug 12, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Aug 12, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Aug 12, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actionsBot commented Aug 12, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

cs-raj commented Aug 12, 2026•
edited
Loading

`auth:tokens` namespace + `auth:tokens:list`

`readGlobalFieldSchemas` utility

snyk-ioBot commented Aug 12, 2026•
edited
Loading