DX | 10-08-2026 | Release by cs-raj · Pull Request #185 · contentstack/contentstack-management-python

cs-raj · 2026-08-11T09:34:01Z

Bug fixes

Fixed a GPL-2.0 license compliance issue in the Python management SDK

DX | 30-03-2026 | Release

back merge

fix: request version bump

Enh: Added cursor rules and skills

Added release version bump and changelog file

Added Security fixes, cursor rules and skill files

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PYTHONDOTENV-16115271

…9afab2ca31e93c [Snyk] Security upgrade python-dotenv from 1.0.0 to 1.2.2

…se-process enh(DX-6155): adopt development→main release flow, back-merge, and version checks

Added urllib version bump

… 3.14 (the standalone 0.5.x package fails to build on newer Python versions)

Removed unused dependency so the package installs on Python 3.12+ an…

Fix/resolve main conflicts

DX | 01-06-2026 | Release

chore: back-merge main into development

feat: Added Endpoint Integration for CMA Python SDK

updated skill files and agents

fix: version bump 08-07-2026

chore: back-merge main into development

Added branches support in entry variants

DX | 20-07-2026 | Release

chore: back-merge main into development

Bump setuptools requirement from >=80.0.0,<82.0.0 to >=83.0.0 to address a Snyk-flagged vulnerability, and bump package version to 1.11.1. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

fix: bump setuptools to resolve Snyk vulnerability

chore: back-merge main into development

fix false positive hardcoded secrets

pylint is a static analysis tool not shipped in the production package. Moving it to requirements-dev.txt removes the GPL-2.0 copyleft concern from Snyk production dependency scans (DX-8256). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

back merge

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Addresses Copilot review comment — AGENTS.md and skills/dev-workflow/SKILL.md still referenced requirements.txt for pylint after it was moved to requirements-dev.txt. Also added pylint to the setup.py dev extra so `pip install -e ".[dev]"` installs it. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

fix: move pylint to dev deps to resolve Snyk GPL-2.0 flag (DX-8256)

chore: back-merge main into development

snyk-io · 2026-08-11T09:34:17Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

cs-raj · 2026-08-11T09:34:41Z

Closing — release PRs are going directly development → main for this cycle.

github-actions · 2026-08-11T09:34:55Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	2	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 2
Low without fixes: 0

✅ BUILD PASSED - All security checks passed

harshitha-cstkand others added 30 commits March 30, 2026 15:44

Merge pull request#141from contentstack/staging
adbdf89
DX | 30-03-2026 | Release

Merge pull request#143from contentstack/main
7cab71d
back merge

fix: request version bump
8581fa6

Merge pull request#144from contentstack/fix/snyk-request-version-bump
1a0d430
fix: request version bump

Enh: Added cursor rules and skills
fddda8e

Updated cursor rules as per new structure
bacb1f0

Removed the reports
9fa7935

Merge pull request#145from contentstack/enh/DX-5381
1b018fc
Enh: Added cursor rules and skills

Added release version bump and changelog file
b345005

Merge pull request#147from contentstack/fix/release_version_bump
524f1d1
Added release version bump and changelog file

Merge pull request#146from contentstack/development
ab5144c
Added Security fixes, cursor rules and skill files

fix: requirements.txt to reduce vulnerabilities
369dc64
The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PYTHONDOTENV-16115271

Merge pull request#149from contentstack/snyk-fix-e6c7f9d976f131291a…
c29fca3
…9afab2ca31e93c [Snyk] Security upgrade python-dotenv from 1.0.0 to 1.2.2

enh: adopt development→main release flow, back-merge, and version checks
195faa5

Merge pull request#151from contentstack/enh/dx-6155-adopt-new-relea…
6136eae
…se-process enh(DX-6155): adopt development→main release flow, back-merge, and version checks

Added urllib version bump
978411d

Merge pull request#152from contentstack/fix/snyk-fix
b324543
Added urllib version bump

Added branches support in entry variants
59b63cc

Removed unused dependency so the package installs on Python 3.12+ and…
56a452d
… 3.14 (the standalone 0.5.x package fails to build on newer Python versions)

Merge pull request#154from contentstack/enh/dx-7349
f058376
Removed unused dependency so the package installs on Python 3.12+ an…

Fixed merge conflits
2869f36

Merge pull request#157from contentstack/fix/resolve-main-conflicts
24566e5
Fix/resolve main conflicts

Merge pull request#155from contentstack/development
22ab6b8
DX | 01-06-2026 | Release

Merge pull request#158from contentstack/main
b3eb74a
chore: back-merge main into development

feat: Added Endpoint Integration for CMA Python SDK
edec155

Delete ENDPOINT_INTEGRATION.md
22b4750

Merge pull request#159from contentstack/enhc/DX-7277
057e873
feat: Added Endpoint Integration for CMA Python SDK

updated skill files and agents
ea960a9

Merge pull request#160from contentstack/fix/agents
33359c1
updated skill files and agents

Merge branch 'main' into development
374049a

OMpawar-21and others added 24 commits July 8, 2026 16:11

Merge branch 'main' into fix/version-bump-8-7-26
5687fa5

Merge pull request#173from contentstack/fix/version-bump-8-7-26
8b7916d
fix: version bump 08-07-2026

Merge pull request#174from contentstack/main
8d1b46e
chore: back-merge main into development

Merge branch 'development' into enh/dx-7265
9d208b1

Update __init__.py
1dc5d42

Merge pull request#153from contentstack/enh/dx-7265
2bc2ce1
Added branches support in entry variants

Merge pull request#175from contentstack/development
fc1d0a3
DX | 20-07-2026 | Release

Merge pull request#176from contentstack/main
1228771
chore: back-merge main into development

fix: bump setuptools to resolve Snyk vulnerability
ce4a500
Bump setuptools requirement from >=80.0.0,<82.0.0 to >=83.0.0 to address a Snyk-flagged vulnerability, and bump package version to 1.11.1. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Merge pull request#177from contentstack/fix/snyk-fix-22-07-2026
09b3a5a
fix: bump setuptools to resolve Snyk vulnerability

Merge pull request#178from contentstack/main
d40cb5f
chore: back-merge main into development

sca-scan.yml
da76339

fix false positive hardcoded secrets
385f8aa

ci: install setuptools so coverage-badge can import pkg_resources
82da045

ci: pin setuptools<81 so coverage-badge can import pkg_resources
3ae7c9a

Merge pull request#181from contentstack/fix/snyk-issues-secrets
df34524
fix false positive hardcoded secrets

chore: bump version to 1.11.2
eaea543
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Merge pull request#183from contentstack/main
946d929
back merge

Merge branch 'main' into fix/snyk-pylint-gpl-dx8256
93eff64

Potential fix for pull request finding
81d6307
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Merge pull request#182from contentstack/fix/snyk-pylint-gpl-dx8256
3a58ab1
fix: move pylint to dev deps to resolve Snyk GPL-2.0 flag (DX-8256)

Merge pull request#184from contentstack/main
019098b
chore: back-merge main into development

cs-raj requested review from a team as code owners August 11, 2026 09:34

cs-raj closed this Aug 11, 2026

Navigation Menu

Uh oh!

DX | 10-08-2026 | Release - #185

DX | 10-08-2026 | Release#185
cs-raj wants to merge 85 commits into
stagingfrom
development

cs-raj commented Aug 11, 2026

Uh oh!

snyk-ioBot commented Aug 11, 2026•
edited
Loading

Uh oh!

cs-raj commented Aug 11, 2026

Uh oh!

github-actionsBot commented Aug 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants

Uh oh!

Conversation

cs-raj commented Aug 11, 2026

Bug fixes

Uh oh!

snyk-ioBot commented Aug 11, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

cs-raj commented Aug 11, 2026

Uh oh!

github-actionsBot commented Aug 11, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants

snyk-ioBot commented Aug 11, 2026•
edited
Loading