DX | 12-08-2026 | Release by cs-raj · Pull Request #341 · contentstack/cli-plugins

cs-raj · 2026-08-12T07:27:20Z

DX | 12-08-2026 | Release

Promotes the CLI v2 plugin suite from v2-dev → development. All packages reach their GA v2.0.0 milestone.

Version Bumps

Package	Previous	New
`@contentstack/cli-asset-management`	—	1.0.0 (new)
`@contentstack/apps-cli`	1.7.4	2.0.0
`@contentstack/cli-audit`	1.21.0	2.0.0
`@contentstack/cli-cm-bootstrap`	1.19.9	2.0.0
`@contentstack/cli-cm-branches`	1.8.5	2.0.0
`@contentstack/cli-bulk-operations`	1.2.4	2.0.0
`@contentstack/cli-cm-clone`	1.21.11	2.0.0
`@contentstack/cli-cm-export`	1.27.0	2.0.0
`@contentstack/cli-cm-export-to-csv`	1.12.8	2.0.0
`@contentstack/cli-cm-export-query`	1.0.7	2.0.0
`@contentstack/cli-cm-import`	1.35.0	2.0.0
`@contentstack/cli-cm-import-setup`	1.8.8	2.0.0
`@contentstack/cli-cm-migrate-rte`	1.7.4	2.0.0
`@contentstack/cli-cm-regex-validate`	1.0.3	2.0.0
`@contentstack/cli-cm-seed`	1.15.10	2.0.0
`@contentstack/cli-external-migrate`	1.0.0-alpha.7	2.0.0
`@contentstack/cli-migration`	1.12.6	2.0.0
`@contentstack/cli-variants`	1.6.2	2.0.0
`contentstack-cli-content-type`	1.5.4	2.0.0
`contentstack-cli-tsgen`	4.10.3	5.0.0

@contentstack/cli-asset-management (new package)

New Features

First release of the Contentstack Assets API adapter for export and import.
Export assets across spaces, workspaces, and asset types with chunked JSON output.
Import assets with full field mapping and workspace/space-level reconciliation.
OAuth support for authenticated asset operations.
Asset publishing with environment and locale targeting.
Query export support for CS Assets.
Retry utility for resilient API calls.

@contentstack/cli-bulk-operations

Breaking Changes

Removed the --api-version flag from cm:stacks:bulk-entries. The NRP header is now hardcoded at the SDK call site to 3.2. Any scripts or CI pipelines passing this flag must remove it — it will cause an unrecognized-flag error.

New Features

Added cm:stacks:bulk-taxonomies command for bulk taxonomy publish/unpublish operations.
Added CS Assets delete and move operations to the bulk-assets command.
Integrated progress manager UI for real-time operation feedback.
Asset count API integrated for exact pagination totals.

Fixes

Chunk CS Assets bulk delete/move requests to the 100-item API cap.
Collect all locales and deduplicate asset UIDs in bulk publish payload.
Hardened NRP header enforcement on taxonomy publish and fixed include-variants validation.

@contentstack/cli-cm-export

New Features

Detect Asset Management 2.0 via plan-check; automatically skip assets under a management token.
Global fields now exported in per-file format (one file per global field UID) instead of a single bundled file.

Fixes

Validate --module flag value before execution begins.
Remove unused @contentstack/cli-dev-dependencies package.

@contentstack/cli-cm-import

New Features

Global fields now imported from per-file format, matching the new export structure.

Fixes

Preserve env-locale pairing for AM asset publish during import.
Fix entry publish locale mapping — added local env mapping for entries as 1:1.
Validate --module flag value before execution begins.

@contentstack/cli-audit

New Features

Global fields audit updated to per-file format.

Fixes

Scope asset publish details audit to the exported stack only; prevent cross-stack bleed.
Report skipped publish details accurately when the source stack is unknown.
Fix 'detials' typo in ASSET_FIX message.

@contentstack/apps-cli

New Features

Added org plan check before asset scanning operations.

Fixes

Show login error on console and improve API key validation.
Normalize short flag consistency.

@contentstack/cli-variants

Fixes

Fix CT linking failure when an experience has empty audiences.
Make the variant-skip warning message generic (no longer hardcodes variant type).
Remove unused lodash/values and lodash/cloneDeep imports.

@contentstack/cli-cm-bootstrap

Breaking Changes

Removed the deprecated seed repo. Any bootstrap flows that referenced the old seed repository will need to be updated.

Fixes

Remove dead sampleapp branch reference.

@contentstack/cli-cm-seed

Breaking Changes

Removed deprecated stack-starter-app seed stack.

Fixes

Restore --locale hidden flag — required internally by bootstrap.

@contentstack/cli-cm-clone

Fixes

Resolve package root correctly by directory depth in the clone command.
Resolve stack-clone auth failure for non-NA regions.

@contentstack/cli-cm-import-setup

Fixes

Show backup folder path on command completion.

@contentstack/cli-cm-regex-validate

Fixes

Remove eslint-config-oclif-typescript from flat ESLint config.
Normalize short flag consistency across commands.

@contentstack/cli-migration

Breaking Changes

Removed deprecated command aliases and hidden flags.

Fixes

Normalize short flag consistency.

@contentstack/cli-cm-migrate-rte

Breaking Changes

Removed deprecated command aliases and hidden flags.

contentstack-cli-tsgen (5.0.0)

Fixes

Normalize short flag consistency.

@contentstack/cli-cm-branches

No functional changes. Version bumped to 2.0.0 as part of the GA v2 release baseline.

@contentstack/cli-cm-export-to-csv

Fixes

Fixed bulk operation integration and export-to-csv data handling.
Cleaned up stale beta version strings and broken links in README.

@contentstack/cli-cm-export-query

Fixes

Removed unused @contentstack/cli-dev-dependencies package.

contentstack-cli-content-type

New Features

Global fields now reflected in per-file format, consistent with export/import/audit changes.

Fixes

Removed stale --token-alias flag exclusions from README.

@contentstack/cli-external-migrate

Fixes

Updated short flags of external commands.
Add api_version 3.2 header assertions on scheduleEntryAction.

Cross-cutting

Security: Resolved Snyk hardcoded secret false positives in message constants across multiple packages.
Security: Resolved path traversal issue.
Auth: Show login error on console and improved API key validation across import/export flows.
CI: Normalized plugin test scripts, added tsgen coverage, and switched to per-package CI execution.
Chore: GA version bumps — dropped all -beta suffixes, bumped third-party deps to latest minor.

Fixed lint and lock file update

Fix/version bump v2

DX | 29-06-2026 | Beta Release

version bump import setup plugin

V2 beta back merge

add API key validation in import/export configurations

Fix/back merge development v2

…date, tsgen, migration, and apps-cli

…nto feat/Asset-Scanning

…rkflow

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

…gins into feat/Asset-Scanning

The ASSET_FIX message shipped with a misspelling in user-facing output. A regression test in test/unit/messages/index.test.ts guards against it and was failing. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

The private method had no callers. Asset scanning detection is already handled in import-config-handler.ts via config.planStatus['assetsScan'], which feeds assetScanningEnabled and skipAssetsPublish. Keeping a second detection path with a different data source risked drift, and its bare catch reported "not enabled" on any API error. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Feature branch for Asset scanning v2

fix rename --config-file to --config and --config to --inline-config in cm:stacks:migration

chore: GA version bumps — promote all packages from beta to stable and update third-party deps

snyk-io · 2026-08-12T07:27:40Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-12T07:28:11Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

Port release-production-plugins.yml from development branch for v2 GA, with v2-specific changes: - Trigger on main + workflow_dispatch, tag:latest - Added asset-management and bulk-operations (new in v2) - Removed bulk-publish (package does not exist in v2) - Removed duplicate apps-cli publish step (was publishing with both tag:latest and tag:beta) - Removed broken create_release step (referenced non-existent step id publish-plugins and had an incomplete shell script) Closes DX-10156 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

…release-workflows feat: add v2 production release workflow

github-actions · 2026-08-12T11:23:48Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

cs-raj and others added 30 commits June 29, 2026 18:12

Merge pull request #253 from contentstack/fix/dev

e44c40b

Fixed lint and lock file update

Merge branch 'v2-dev' into fix/DX-3921

d5a2bda

lock file update

c3ba5a9

version bump

aeadaea

update pnpm lock file

d25a200

Merge branch 'v2-dev' into fix/version-bump-v2

fc8ab42

Merge pull request #254 from contentstack/fix/version-bump-v2

7839998

Fix/version bump v2

Merge pull request #248 from contentstack/v2-dev

8a060ba

DX | 29-06-2026 | Beta Release

version bump import setup plugin

ec47ccc

Merge pull request #255 from contentstack/fix/version-bump--v2

366d09a

version bump import setup plugin

Merge branch 'v2-dev' into fix/DX-3921

c155a00

Merge pull request #256 from contentstack/v2-beta

5bf743f

V2 beta back merge

fix: show login error on console and improve API key validation

9fb2e2e

add API key validation in import/export configurations

Merge branch 'main' into fix/back-merge-development-v2

c807cd1

update pnpm lock file

1c112d3

Merge pull request #259 from contentstack/fix/back-merge-development-v2

528c614

Fix/back merge development v2

Merge branch 'v2-dev' into fix/dx-7893-login-error-validate-api-key

e406e74

pnpm lock update

1184291

fix(flags): normalize short flag consistency across cli-cm-regex-vali…

f7a7f7d

…date, tsgen, migration, and apps-cli

fixed org plan check feature

4040d12

removed console logs

e8c4bcd

updated short flags of external commands

49de3be

Merge branch 'feat/DX-93-72' of github.com:contentstack/cli-plugins i…

ce03768

…nto feat/Asset-Scanning

updated unit test workflow

2f2920c

updated unit test workflow

06acfed

updated unit test workflow and added parallel execution

8d35697

fixed test case and removed parallel test execution

dc6ac5e

fixed seed tests

28f6058

Removed character flag from the command and removed seed test from wo…

fb610bf

…rkflow

added asset scanning plan check

f65ee46

naman-contentstack and others added 14 commits August 6, 2026 13:32

style(bulk-operations): fix prettier lint error in bulk-assets imports

3c0d009

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

merged changes from v1

697b187

Merge branch 'feat/Asset-Scanning' of github.com:contentstack/cli-plu…

731fac3

…gins into feat/Asset-Scanning

updated lock file

1520e6e

fix(audit): correct 'detials' typo in ASSET_FIX message

355d400

The ASSET_FIX message shipped with a misspelling in user-facing output. A regression test in test/unit/messages/index.test.ts guards against it and was failing. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Merge pull request #294 from contentstack/feat/Asset-Scanning

b268a6d

Feature branch for Asset scanning v2

Merge branch 'v2-dev' into fix/DX-3921

6a8339a

Merge pull request #251 from contentstack/fix/DX-3921

524937a

fix rename --config-file to --config and --config to --inline-config in cm:stacks:migration

Merge branch 'v2-dev' into chore/ga-version-bumps

f403c35

management sdk version bump consistent in bulk operation

c18a525

readme updates

0a936d0

readme updates

f900b68

Merge pull request #338 from contentstack/chore/ga-version-bumps

3c5300b

chore: GA version bumps — promote all packages from beta to stable and update third-party deps

cs-raj requested review from a team as code owners August 12, 2026 07:27

harshitha-cstk previously approved these changes Aug 12, 2026

View reviewed changes

abhishek-ezhava-cstk previously approved these changes Aug 12, 2026

View reviewed changes

netrajpatel approved these changes Aug 12, 2026

View reviewed changes

netrajpatel requested changes Aug 12, 2026

View reviewed changes

Comment thread .github/workflows/release-v2-beta-plugins.yml

Comment thread .github/workflows/release-v2-beta-plugins.yml

cs-raj and others added 2 commits August 12, 2026 16:15

Merge pull request #343 from contentstack/fix/DX-10156-v2-production-…

689edb6

…release-workflows feat: add v2 production release workflow

cs-raj dismissed stale reviews from abhishek-ezhava-cstk and harshitha-cstk via 689edb6 August 12, 2026 11:23

reeshika-h approved these changes Aug 12, 2026

View reviewed changes

netrajpatel approved these changes Aug 12, 2026

View reviewed changes

cs-raj merged commit 57bac9f into development Aug 12, 2026
9 of 12 checks passed

Navigation Menu

Uh oh!

DX | 12-08-2026 | Release - #341

DX | 12-08-2026 | Release#341
cs-raj merged 1125 commits into
developmentfrom
v2-dev

cs-raj commented Aug 12, 2026 •

edited

Loading

Uh oh!

snyk-io Bot commented Aug 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 12, 2026

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Aug 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Uh oh!

Conversation

cs-raj commented Aug 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!