Skip to content

Chore v1 legacy release workflow - #349

Merged
cs-raj merged 7 commits into
v1-legacyfrom
chore/v1-legacy-release-workflow
Aug 13, 2026
Merged

Chore v1 legacy release workflow#349
cs-raj merged 7 commits into
v1-legacyfrom
chore/v1-legacy-release-workflow

Conversation

@cs-raj

@cs-raj cs-raj commented Aug 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

This PR sets up the v1-legacy release workflow for cli-plugins and bumps all package versions in preparation for the v1 release.

Workflow changes (release-v1-legacy-plugins.yml)

  • Renamed release-production-plugins.yml → release-v1-legacy-plugins.yml to avoid confusion with the main production workflow
  • Changed branch trigger from main → v1-legacy
  • Changed npm dist-tag from latest → v1-x so v1 releases don't overwrite the latest tag
  • Added --latest=false to gh release create so GitHub releases from this workflow are not marked as latest

Package version bumps

Package Old New
@contentstack/apps-cli 1.7.4 1.7.5
@contentstack/cli-audit 1.21.0 1.21.1
@contentstack/cli-cm-bootstrap 1.19.9 1.19.10
@contentstack/cli-cm-branches 1.8.5 1.8.6
@contentstack/cli-bulk-operations 1.2.4 1.2.5
@contentstack/cli-cm-regex-validate 1.0.3 1.0.4
contentstack-cli-tsgen 4.10.3 4.10.4
@contentstack/cli-cm-clone 1.21.11 1.21.12
contentstack-cli-content-type 1.5.4 1.5.5
@contentstack/cli-cm-export-to-csv 1.12.8 1.12.9
@contentstack/cli-cm-export 1.27.0 1.27.1
@contentstack/cli-external-migrate 1.0.0-alpha.7 1.0.0-alpha.8
@contentstack/cli-cm-import-setup 1.8.8 1.8.9
@contentstack/cli-cm-import 1.35.0 1.35.1
@contentstack/cli-cm-migrate-rte 1.7.4 1.7.5
@contentstack/cli-migration 1.12.6 1.12.7
@contentstack/cli-cm-export-query 1.0.7 1.0.8
@contentstack/cli-cm-seed 1.15.10 1.15.11
@contentstack/cli-variants 1.6.2 1.6.3

Dependency updates

  • @contentstack/cli-command: ~1.8.5 → ~1.8.7
  • @contentstack/cli-utilities: ~1.19.1 → ~1.19.2
  • @contentstack/cli-config: ~1.21.1 → ~1.21.2
  • @contentstack/cli-auth: ~1.8.5 → ~1.8.7
  • Cross-plugin deps (export, import, audit, variants, seed, clone) updated to their new patch versions

Test plan

  • Verify workflow triggers on push to v1-legacy branch
  • Verify npm publish uses v1-x dist-tag (not latest)
  • Verify GitHub release is not marked as latest
  • Verify all packages publish successfully with new patch versions

🤖 Generated with Claude Code

cs-raj and others added 2 commits August 13, 2026 13:06
@cs-raj @claude
chore: add v1-legacy release workflow
02a1320 
Renamed release workflow file and updated triggers/tags for v1-legacy branch support. Branch trigger changed to v1-legacy, npm dist-tag set to v1-x, and GitHub releases marked as --latest=false.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@cs-raj @claude
chore: bump patch versions and update CLI deps for v1-legacy release
cd708be 
Patch bumped all plugin package versions and updated @contentstack/cli-command, cli-utilities, cli-config, cli-auth dependencies to their new v1-legacy versions.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@cs-raj
cs-raj requested a review from a team as a code owner August 13, 2026 09:05
@snyk-io

snyk-io Bot commented Aug 13, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 0 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

✅ BUILD PASSED - All security checks passed

shafeeqd959
shafeeqd959 previously approved these changes Aug 13, 2026
View reviewed changes
@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 105 25 ✅ Passed
🟡 Medium Severity 2 53 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 1 30 / 120 days ⚠️ Warning
🟡 Medium 2 52 90 / 365 days ❌ Failed / ⚠️ Warning
🔵 Low 0 0 180 / 365 days ✅ Passed

🟡 Medium Severity - SLA Breached Issues (with fixes)

Showing 2 issue(s) that have exceeded the 90-day SLA threshold:

  1. Improper Validation of Specified Index, Position, or Offset in Input

    • ID: SNYK-JS-UUID-16133035
    • Package: uuid@8.3.2
    • Published: 112 days ago (SLA: 90 days)
    • CVSS Score: 6.3
    • CVE: CVE-2026-41907

  2. Improper Validation of Specified Index, Position, or Offset in Input

    • ID: SNYK-JS-UUID-16133035
    • Package: uuid@8.3.2
    • Published: 112 days ago (SLA: 90 days)
    • CVSS Score: 6.3
    • CVE: CVE-2026-41907

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

  • Critical without fixes: 0
  • High without fixes: 105
  • Medium without fixes: 53
  • Low without fixes: 0

❌ BUILD FAILED - Security checks failed

Please review and fix the security vulnerabilities before merging.

reeshika-h
reeshika-h previously approved these changes Aug 13, 2026
View reviewed changes
OMpawar-21
OMpawar-21 previously approved these changes Aug 13, 2026
View reviewed changes
@cs-raj @claude
chore: fix README corrections across all plugins
7f69693 
- Fixed version mismatches in apps-cli, bulk-operations, regex-validate, migrate-rte
- Fixed wrong package name in title/badge for tsgen and content-type
- Fixed wrong See code links (old cli repo → cli-plugins, wrong package paths in branches)
- Fixed audit source links pointing to separate audit repo
- Removed duplicate command blocks in clone, export, import, import-setup, migration, seed
- Fixed --modules/--module inconsistency in import-setup
- Fixed Sorce typo in external-migrate
- Fixed doubled csdx prefix in bulk-publish
- Fixed license badge links pointing to old cli repo

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@cs-raj
cs-raj dismissed stale reviews from OMpawar-21, reeshika-h, and shafeeqd959 via 7f69693 August 13, 2026 09:27
@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 105 25 ✅ Passed
🟡 Medium Severity 2 53 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 1 30 / 120 days ⚠️ Warning
🟡 Medium 2 52 90 / 365 days ❌ Failed / ⚠️ Warning
🔵 Low 0 0 180 / 365 days ✅ Passed

🟡 Medium Severity - SLA Breached Issues (with fixes)

Showing 2 issue(s) that have exceeded the 90-day SLA threshold:

  1. Improper Validation of Specified Index, Position, or Offset in Input

    • ID: SNYK-JS-UUID-16133035
    • Package: uuid@8.3.2
    • Published: 112 days ago (SLA: 90 days)
    • CVSS Score: 6.3
    • CVE: CVE-2026-41907

  2. Improper Validation of Specified Index, Position, or Offset in Input

    • ID: SNYK-JS-UUID-16133035
    • Package: uuid@8.3.2
    • Published: 112 days ago (SLA: 90 days)
    • CVSS Score: 6.3
    • CVE: CVE-2026-41907

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

  • Critical without fixes: 0
  • High without fixes: 105
  • Medium without fixes: 53
  • Low without fixes: 0

❌ BUILD FAILED - Security checks failed

Please review and fix the security vulnerabilities before merging.

@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 0 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

✅ BUILD PASSED - All security checks passed

@cs-raj @claude
chore: bump @contentstack/cli-cm-bulk-publish patch version to 1.13.1
649a4be 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 0 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

✅ BUILD PASSED - All security checks passed

@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 0 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

✅ BUILD PASSED - All security checks passed

@cs-raj
cs-raj merged commit bb2edc2 into v1-legacy Aug 13, 2026
12 checks passed
@cs-raj
cs-raj deleted the chore/v1-legacy-release-workflow branch August 13, 2026 09:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@reeshika-h reeshika-h reeshika-h approved these changes
@maheshmotkar-cs maheshmotkar-cs maheshmotkar-cs approved these changes
@OMpawar-21 OMpawar-21 OMpawar-21 approved these changes
@shafeeqd959 shafeeqd959 shafeeqd959 left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@cs-raj @shafeeqd959 @reeshika-h @maheshmotkar-cs @OMpawar-21