chore: GA version bumps — promote all packages from beta to stable and update third-party deps - #338
chore: GA version bumps — promote all packages from beta to stable and update third-party deps#338cs-raj wants to merge 5 commits into
Conversation
…minor Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
There was a problem hiding this comment.
Pull request overview
This PR prepares the cli-plugins monorepo for CLI v2 GA by promoting internal @contentstack/* packages from beta to stable versions and updating third-party dependencies/READMEs accordingly across multiple plugins.
Changes:
- Promotes plugin package versions from
*-beta.*to stable1.0.0/2.0.0/5.0.0and updates cross-plugin@contentstack/*dependency pins to stable ranges. - Bumps third-party dependencies/devDependencies (notably
@oclif/*,eslint*,fs-extra,uuid, etc.) across packages. - Regenerates/updates several oclif READMEs and updates root
pnpmtooling version.
Reviewed changes
Copilot reviewed 34 out of 35 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| packages/contentstack-variants/package.json | Promotes @contentstack/cli-variants to 2.0.0 and updates core/internal deps to stable. |
| packages/contentstack-seed/README.md | Updates generated command docs/usage for GA release. |
| packages/contentstack-seed/package.json | Promotes @contentstack/cli-cm-seed to 2.0.0 and updates internal/third-party deps. |
| packages/contentstack-query-export/package.json | Promotes @contentstack/cli-cm-export-query to 2.0.0 and updates internal/oclif deps. |
| packages/contentstack-migration/README.md | Updates generated docs/version banner for GA and removes duplicated sections. |
| packages/contentstack-migration/package.json | Promotes @contentstack/cli-migration to 2.0.0 and bumps lint/oclif tooling. |
| packages/contentstack-migrate-rte/package.json | Promotes @contentstack/cli-cm-migrate-rte to 2.0.0 and bumps oclif/eslint deps. |
| packages/contentstack-import/README.md | Updates generated version banner to GA. |
| packages/contentstack-import/package.json | Promotes @contentstack/cli-cm-import to 2.0.0 and updates internal/third-party deps. |
| packages/contentstack-import-setup/README.md | Updates generated version banner to GA. |
| packages/contentstack-import-setup/package.json | Promotes @contentstack/cli-cm-import-setup to 2.0.0 and bumps tooling deps. |
| packages/contentstack-external-migrate/package.json | Promotes @contentstack/cli-external-migrate to 2.0.0 and bumps runtime/dev deps. |
| packages/contentstack-export/README.md | Updates generated version banner to GA. |
| packages/contentstack-export/package.json | Promotes @contentstack/cli-cm-export to 2.0.0 and updates internal/tooling deps. |
| packages/contentstack-export-to-csv/package.json | Promotes @contentstack/cli-cm-export-to-csv to 2.0.0 and bumps deps. |
| packages/contentstack-content-type/README.md | Adds/updates generated command documentation for GA. |
| packages/contentstack-content-type/package.json | Promotes contentstack-cli-content-type to 2.0.0 and bumps tooling deps. |
| packages/contentstack-clone/README.md | Updates generated version banner to GA. |
| packages/contentstack-clone/package.json | Promotes @contentstack/cli-cm-clone to 2.0.0 and updates internal/tooling deps. |
| packages/contentstack-cli-tsgen/package.json | Promotes contentstack-cli-tsgen to 5.0.0 and bumps deps for GA alignment. |
| packages/contentstack-cli-cm-regex-validate/README.md | Expands/updates generated command docs. |
| packages/contentstack-cli-cm-regex-validate/package.json | Promotes @contentstack/cli-cm-regex-validate to 2.0.0 and bumps deps. |
| packages/contentstack-bulk-operations/README.md | Updates generated bulk-operations docs and examples for GA. |
| packages/contentstack-bulk-operations/package.json | Promotes @contentstack/cli-bulk-operations to 2.0.0 and bumps dev tooling deps. |
| packages/contentstack-branches/README.md | Updates generated version banner to GA. |
| packages/contentstack-branches/package.json | Promotes @contentstack/cli-cm-branches to 2.0.0 and bumps deps. |
| packages/contentstack-bootstrap/README.md | Updates generated version banner to GA. |
| packages/contentstack-bootstrap/package.json | Promotes @contentstack/cli-cm-bootstrap to 2.0.0 and bumps deps. |
| packages/contentstack-audit/README.md | Updates generated version banner to GA. |
| packages/contentstack-audit/package.json | Promotes @contentstack/cli-audit to 2.0.0 and bumps deps. |
| packages/contentstack-asset-management/README.md | Minor README formatting/line alignment update. |
| packages/contentstack-asset-management/package.json | Promotes @contentstack/cli-asset-management to 1.0.0 and bumps deps. |
| packages/contentstack-apps-cli/package.json | Promotes @contentstack/apps-cli to 2.0.0 and bumps tooling deps. |
| package.json | Updates root pnpm devDependency and packageManager pin. |
| .talismanrc | Adds checksums for updated README files. |
Suppressed comments (4)
packages/contentstack-content-type/README.md:172
- This USAGE block has an extra
|([-k <value> | | -a <value>]split across lines), which makes the generated syntax invalid/unclear.
$ csdx content-type:diagram --output <value> --direction portrait|landscape --type svg|dot [-k <value> | | -a
<value>]
packages/contentstack-content-type/README.md:204
- The USAGE line contains a duplicated pipe (
[-k <value> | | -a <value>]), which is malformed CLI syntax in the docs.
$ csdx content-type:list [-k <value> | | -a <value>] [--order title|modified]
packages/contentstack-bulk-operations/README.md:202
- The "See code" link URL is missing the
packages/contentstack-bulk-operations/path segment and points atblob/v2.0.0, which makes the link incorrect/brittle. Align it with the repo's standardblob/main/packages/...links.
_See code: [src/commands/cm/stacks/bulk-entries.ts](https://github.com/contentstack/cli-plugins/blob/v2.0.0/src/commands/cm/stacks/bulk-entries.ts)_
packages/contentstack-bulk-operations/README.md:266
- The "See code" link URL is missing the
packages/contentstack-bulk-operations/path segment and points atblob/v2.0.0, which makes the link incorrect/brittle. Align it with the other READMEs.
_See code: [src/commands/cm/stacks/bulk-taxonomies.ts](https://github.com/contentstack/cli-plugins/blob/v2.0.0/src/commands/cm/stacks/bulk-taxonomies.ts)_
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| compare two Content Types on different Stacks | ||
|
|
||
| EXAMPLES | ||
| $ csdx content-type:compare-remote --origin-stack "xxxxxxxxxxxxxxxxxxx" --remote-stack "xxxxxxxxxxxxxxxxxxx" -content-type "home_page" |
GitHub Actions workflow pins pnpm@10.28.0 via action-setup; bumping packageManager to 10.34.4 caused ERR_PNPM_BAD_PM_VERSION in CI. Keep packageManager aligned with the workflow config. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
There was a problem hiding this comment.
Reviewed against v2-dev. Version math is correct — all ~20 packages promoted beta → stable (2.0.0, with cli-asset-management→1.0.0 and tsgen→5.0.0), no broken internal/cross-repo dependency ranges, third-party bumps minor/patch only. A few things on top of Copilot's comments (all 4 of which are valid — please also fix those).
Blocking
-
pnpm-lock.yamlis out of sync →tsgen-integration-testwill fail. The lockfile is unchanged fromv2-dev(still 1272.0.0-beta.*refs) whilepackage.jsonspecifiers moved to~2.0.0and updated third-party ranges. That workflow runs on every PR withpnpm install --frozen-lockfile(pnpm 10.28.0), which errors on the mismatch. Runpnpm installand commit the regenerated lock. (Side note: the.talismanrcchecksum forpnpm-lock.yamlwas bumped but doesn't match the committed lockfile — looks like the regen was done locally but the lock wasn't committed.)
Should fix
- Inconsistent pin:
cli-bulk-operations→@contentstack/cli-asset-management@"1.0.0"(exact) while everything else uses~1.0.0. Recommend~1.0.0.
README nits not already covered by Copilot
-
contentstack-cli-cm-regex-validate/README.md: stale example…/1.2.1 … node-v20.8.0(should be2.0.0/node-v22), and the License badge points at the old standalone repo. -
contentstack-content-type/README.md: the diagram image (line 31) still links to the oldcontentstack-cli-content-typerepo. (Copilot's pipe comments on lines 172/204 are separate and also worth fixing — a freshoclif readmeregen should clear both those and the bulk-operations link paths in one go.)
- Regenerate all plugin READMEs via oclif readme - Fix bulk-operations: add repositoryPrefix to oclif config, bump cli-asset-management pin to ~1.0.0 - Fix content-type: remove phantom token-alias from exclusive flag arrays in audit/compare/details/diagram/list commands; fixes double-pipe in USAGE strings - Fix content-type README: update diagram image link to monorepo path - Fix regex-validate README: update static version example to 2.0.0/node-v22 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
|
Hi @aniket-shikhare-cstk, thanks for the thorough review! Here's the status on each item. cc @netrajpatel All "should fix" and README nit items are resolved in the latest commit (
Lockfile blocker — this is currently unresolvable on our end. The |
- apps-cli: update usage example from 2.0.0-beta.2/node-v18 to 2.0.0/node-v22 - export-to-csv: update usage example from 2.0.0-beta.9 to 2.0.0 - cli-tsgen: remove @beta from install command, update migration note to 5.0.0 - regex-validate: fix License badge to point to monorepo path Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
Thanks @cs-raj — fixes all confirmed on my end, and agreed the lockfile is just publish-ordering. Your plan works for me. |
Overview
This PR prepares all packages in the `cli-plugins` monorepo for the General Availability (GA) release of CLI v2. It does two things:
Package Version Promotions (self-versions)
Internal `@contentstack/*` Dependency Updates
All cross-package `@contentstack/*` dependency references have been updated from their individual beta pins to stable GA versions:
Third-Party Dependency Bumps (minor/patch only)
`@oclif/*` ecosystem
ESLint ecosystem
Runtime dependencies
Type definitions & test utilities
Build tooling
README Updates
READMEs are auto-generated by oclif (`oclif readme`). Changes across affected packages reflect:
Affected: `cli-audit`, `cli-cm-export`, `cli-cm-import`, `cli-cm-bootstrap`, `cli-cm-branches`, `cli-cm-clone`, `cli-cm-import-setup`, `cli-cm-seed`, `cli-cm-regex-validate`, `cli-migration`, `cli-asset-management`, `contentstack-content-type`.
What Was NOT Changed
Related PRs
Test Plan
🤖 Generated with Claude Code