DX | 12-08-2026 | Release by cs-raj · Pull Request #2697 · contentstack/cli

cs-raj · 2026-08-12T07:30:30Z

Summary

Release PR merging v2-dev into development for the 12-08-2026 release cycle. Accumulates changes from the last release (25-05-2026) through the current date, including bug fixes, new utilities, documentation, and CI/CD pipeline updates.

Bug Fixes

Refactored OAuth token refresh logic in AuthHandler to prevent concurrent session expiry — eliminates race condition where parallel requests each triggered a refresh
Fixed failing unit test cases in contentstack-utilities
Fixed incorrect text displayed for content assets export
Fixed chalk load error by adding a global cache in chalk.ts and unifying @contentstack/cli-utilities loading across the monorepo to prevent multiple instances
Fixed csdx config:get:region not displaying the AM endpoint for custom regions

New Features / Enhancements

Progress Summary System (contentstack-utilities): Added cli-progress-manager, summary-manager, and progress-strategy — a structured progress/summary reporting layer for long-running CLI operations
Content-Type Utils (contentstack-utilities): New content-type-utils.ts module with shared content-type helpers
Opt-in Plugin Guide (contentstack): New opt-in-plugin-guide.ts init hook to surface plugin adoption guidance on startup
auth tokens list split into its own command file for cleaner separation
AM2.0 support: Version bumps across CLI packages to align with AM2.0

Removals

Removed command-deprecation-check.ts prerun hook from @contentstack/cli

Documentation & AI Config

MIGRATION.md: Comprehensive V1 → V2 migration guide (664 lines) covering all breaking changes, command renames, flag changes, and updated workflows
BULK-OPERATIONS-MIGRATION.md: Dedicated guide (510 lines) for migrating bulk-publish/bulk-unpublish workflows to V2
AGENTS.md: AI agent instructions replacing the removed .cursor/ rules
skills/: Moved and significantly expanded CLI skills (code-review, contentstack-cli, dev-workflow, framework, testing) from .cursor/skills/ to root skills/ directory
Updated README.md with V2 references

CI/CD & Infrastructure

Removed release-production-pipeline.yml (superseded)
Added unified release.yml workflow
Renamed beta release workflows: release-v2-beta-core.yml, release-v2-beta-platform-plugins.yml
Security: overrode brace-expansion to 5.0.5 across all packages
Updated sca-scan.yml and unit-test.yml workflows

Test Coverage

Added mocha-root-hooks.js to contentstack-auth, contentstack-config, and contentstack-utilities for consistent test setup
New test files: cliProgressManager.test.ts, summaryManager.test.ts, content-type-utils.test.ts, auth-handler.test.ts
Improved existing test coverage in tokens-add, tokens-remove, region, log, auth-handler

Packages Changed

@contentstack/cli (main)
@contentstack/cli-auth
@contentstack/cli-command
@contentstack/cli-config
@contentstack/cli-utilities

Test Plan

csdx auth:tokens --list — verify token listing works
csdx auth:tokens:remove — verify token removal flow
csdx config:get:region — verify AM endpoint shows for custom regions
csdx config:set:rate-limit — verify rate limit config
OAuth login with concurrent requests — confirm no session expiry race condition
Export with content assets — verify correct status messages
Startup — verify opt-in plugin guide hook fires correctly
pnpm test across contentstack-auth, contentstack-config, contentstack-utilities — all green

🤖 Generated with Claude Code

chore: fix summary message

…expire Refactor OAuth token refresh logic in AuthHandler to prevent concurre…

…ackages

chore: update package versions and dependencies across contentstack p…

DX | 30-03-2026 | Release | v2-beta

… up pnpm-lock.yaml

version bump

v2 added cursor rules

Fix/back merge v2

DX | 06-04-2026 | Release v2

back merge

…use test command only

…prove error handling in auth-handler tests

Back Merge main to v2-beta

…ource fixes

GitHub Actions workflow pins pnpm@10.28.0 via action-setup; bumping packageManager to 10.34.4 caused ERR_PNPM_BAD_PM_VERSION in CI. Keep packageManager aligned with the workflow config. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

V1 back merge

Fix opt-in plugin warning hook to also cover migrate-rte

Back merge

chore: GA version bumps — promote all packages from beta to 2.0.0 and update third-party deps

snyk-io · 2026-08-12T07:30:44Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-12T07:31:10Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	2	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 2
Low without fixes: 0

✅ BUILD PASSED - All security checks passed

Port production release workflows from development branch for v2 GA: - release-production-pipeline.yml: triggers on main + workflow_dispatch - release-production-core.yml: tag:latest, non-prerelease GitHub release - release-production-platform-plugins.yml: utilities/command/config/auth with tag:latest Also adds .talismanrc exception for secrets:inherit false positive in the pipeline workflow. Closes DX-10156 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

…-release-workflows feat: add v2 production release workflows

github-actions · 2026-08-12T11:23:33Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	2	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 2
Low without fixes: 0

✅ BUILD PASSED - All security checks passed

naman-contentstack and others added 30 commits March 24, 2026 19:04

Merge pull request #2492 from contentstack/fix/summary

d938aaf

chore: fix summary message

added cursor rules

6c7efa5

Merge branch 'v2-dev' into fix/dx-3878-oauth-session-expire

34dbcb2

Merge pull request #2481 from contentstack/fix/dx-3878-oauth-session-…

7fcc9d0

…expire Refactor OAuth token refresh logic in AuthHandler to prevent concurre…

chore: update package versions and dependencies across contentstack p…

a51bbba

…ackages

Merge pull request #2502 from contentstack/fix/version-bump-30-03

0b1f4ce

chore: update package versions and dependencies across contentstack p…

Merge pull request #2501 from contentstack/v2-dev

97c8199

DX | 30-03-2026 | Release | v2-beta

version bump

47eed5f

chore: override and update brace-expansion to version 5.0.5 and clean…

81d15c9

… up pnpm-lock.yaml

Merge pull request #2504 from contentstack/fix/version-bumps

8b11015

version bump

added cursor files

5ba0dc0

overrided brace expansion

6fcdece

bumped versions

0c4fe3c

Merge pull request #2494 from contentstack/v2-cursor-rules-update

b42e9df

v2 added cursor rules

merge v2-beta changes to v2-dev

8e578d5

version bump

38d5158

Merge pull request #2514 from contentstack/fix/back-merge-v2

32ab0d1

Fix/back merge v2

Merge pull request #2513 from contentstack/v2-dev

4256a2b

DX | 06-04-2026 | Release v2

Merge pull request #2516 from contentstack/v2-beta

edd55fa

back merge

Back merge main to v2-beta

82bfb95

fix: lock file update

17a0106

Fix: added lint script in the root package

e20c6b6

Removed production workflows and changed unit test cases workflow to …

9a11f31

…use test command only

fix rate limit test merge changes

a4392f5

Refactor test file paths to use relative paths for config.json and im…

bcc8cd7

…prove error handling in auth-handler tests

fix: removed override

593fd05

Skipping utilities test

d0341ac

Merge pull request #2518 from contentstack/fix/back-merge

4531252

Back Merge main to v2-beta

Back merge main to v2-beta

e4ae378

fix: lock file update

3116816

cs-raj and others added 13 commits August 5, 2026 19:07

docs: comprehensive README audit, package.json standardization, and s…

e51c7cb

…ource fixes

v1 changes

3b3a9d2

merged latest changes from v2

d9aeecb

Merge pull request #2692 from contentstack/v1-back-merge

4cd0820

V1 back merge

Fix opt-in plugin warning hook to also cover migrate-rte

652c86f

Merge pull request #2693 from contentstack/fix/DX-10125

4e9b6d7

Fix opt-in plugin warning hook to also cover migrate-rte

Merge branch 'development' into v2-dev

9d02503

Merge pull request #2696 from contentstack/fix/back-merge

76227ed

Back merge

Merge branch 'v2-dev' into chore/ga-version-bumps

9ab5a47

revert core package version bumps

f3c69a8

lock file update

40470fc

Merge pull request #2688 from contentstack/chore/ga-version-bumps

0404d3d

chore: GA version bumps — promote all packages from beta to 2.0.0 and update third-party deps

cs-raj requested review from a team as code owners August 12, 2026 07:30

harshitha-cstk previously approved these changes Aug 12, 2026

View reviewed changes

abhishek-ezhava-cstk previously approved these changes Aug 12, 2026

View reviewed changes

netrajpatel approved these changes Aug 12, 2026

View reviewed changes

netrajpatel requested changes Aug 12, 2026

View reviewed changes

Comment thread .github/workflows/release-v2-beta-core.yml

Comment thread .github/workflows/release-v2-beta-core.yml

cs-raj and others added 2 commits August 12, 2026 16:15

Merge pull request #2699 from contentstack/fix/DX-10156-v2-production…

a551edb

…-release-workflows feat: add v2 production release workflows

cs-raj dismissed stale reviews from abhishek-ezhava-cstk and harshitha-cstk via a551edb August 12, 2026 11:22

reeshika-h approved these changes Aug 12, 2026

View reviewed changes

cs-raj requested a review from netrajpatel August 12, 2026 11:31

netrajpatel approved these changes Aug 12, 2026

View reviewed changes

cs-raj merged commit fd00ff6 into development Aug 12, 2026
11 checks passed

Navigation Menu

Uh oh!

DX | 12-08-2026 | Release - #2697

DX | 12-08-2026 | Release#2697
cs-raj merged 816 commits into
developmentfrom
v2-dev

cs-raj commented Aug 12, 2026 •

edited

Loading

Uh oh!

snyk-io Bot commented Aug 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 12, 2026

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Aug 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Uh oh!

Conversation

cs-raj commented Aug 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Bug Fixes

New Features / Enhancements

Removals

Documentation & AI Config

CI/CD & Infrastructure

Test Coverage

Packages Changed

Test Plan

Uh oh!

snyk-io Bot commented Aug 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actions Bot commented Aug 12, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Aug 12, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

cs-raj commented Aug 12, 2026 •

edited

Loading

snyk-io Bot commented Aug 12, 2026 •

edited

Loading