V1-legacy

.github/workflows/sca-scan.yml

@@ -5,6 +5,9 @@ on:
 jobs:
   security-sca:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@master
       - name: Run Snyk to check for vulnerabilities

.talismanrc

@@ -1,4 +1,6 @@
 fileignoreconfig:
   - filename: pnpm-lock.yaml
-    checksum: 763c12b0555cbd63ca4015664e08de315f0e675125a34de2d9c8d1a73a3723e8
+    checksum: ad8af6ca67f20585ba2e3478cb6119a50508da89492119eabb7d96ec2b56545f
+  - filename: packages/contentstack/README.md
+    checksum: df0892cbcf3f04972161b30a1a0ef8844a2682ce8a3270f2911909e7789ad8d7
 version: '1.0'

packages/contentstack-auth/README.md

@@ -18,7 +18,7 @@ $ npm install -g @contentstack/cli-auth
 $ csdx COMMAND
 running command...
 $ csdx (--version)
-@contentstack/cli-auth/1.8.4 darwin-arm64 node-v22.13.1
+@contentstack/cli-auth/1.8.6 darwin-arm64 node-v24.18.0
 $ csdx --help [COMMAND]
 USAGE
   $ csdx COMMAND

packages/contentstack-auth/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@contentstack/cli-auth",
   "description": "Contentstack CLI plugin for authentication activities",
-  "version": "1.8.5",
+  "version": "1.8.6",
   "author": "Contentstack",
   "bugs": "https://github.com/contentstack/cli/issues",
   "scripts": {
@@ -16,7 +16,7 @@
   },
   "dependencies": {
     "@contentstack/cli-command": "~1.8.5",
-    "@contentstack/cli-utilities": "~1.19.0",
+    "@contentstack/cli-utilities": "~1.19.1",
     "@oclif/core": "^4.11.4",
     "otplib": "^12.0.1"
   },

packages/contentstack-command/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@contentstack/cli-command",
   "description": "Contentstack CLI plugin for configuration",
-  "version": "1.8.5",
+  "version": "1.8.6",
   "author": "Contentstack",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -14,7 +14,7 @@
     "lint": "eslint src/**/*.ts"
   },
   "dependencies": {
-    "@contentstack/cli-utilities": "~1.19.0",
+    "@contentstack/cli-utilities": "~1.19.1",
     "contentstack": "^3.27.0",
     "@oclif/core": "^4.11.4"
   },

packages/contentstack-config/README.md

@@ -18,7 +18,7 @@ $ npm install -g @contentstack/cli-config
 $ csdx COMMAND
 running command...
 $ csdx (--version)
-@contentstack/cli-config/1.20.5 darwin-arm64 node-v22.13.1
+@contentstack/cli-config/1.21.1 darwin-arm64 node-v24.18.0
 $ csdx --help [COMMAND]
 USAGE
   $ csdx COMMAND
@@ -316,8 +316,8 @@ USAGE
   $ csdx config:set:ea-header [--header-alias <value>] [--header <value>]
 
 FLAGS
-  --header=<value>        (optional) Provide the Early Access header alias name.
-  --header-alias=<value>  (optional) Provide the Early Access header value.
+  --header=<value>        (optional) Provide the Early Access header value.
+  --header-alias=<value>  (optional) Provide a name (alias) for this Early Access header.
 
 DESCRIPTION
   Set Early Access header
@@ -340,8 +340,8 @@ USAGE
   $ csdx config:set:early-access-header [--header-alias <value>] [--header <value>]
 
 FLAGS
-  --header=<value>        (optional) Provide the Early Access header alias name.
-  --header-alias=<value>  (optional) Provide the Early Access header value.
+  --header=<value>        (optional) Provide the Early Access header value.
+  --header-alias=<value>  (optional) Provide a name (alias) for this Early Access header.
 
 DESCRIPTION
   Set Early Access header

packages/contentstack-config/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@contentstack/cli-config",
   "description": "Contentstack CLI plugin for configuration",
-  "version": "1.21.0",
+  "version": "1.21.1",
   "author": "Contentstack",
   "scripts": {
     "build": "pnpm compile && oclif manifest && oclif readme",
@@ -15,7 +15,7 @@
   },
   "dependencies": {
     "@contentstack/cli-command": "~1.8.5",
-    "@contentstack/cli-utilities": "~1.19.0",
+    "@contentstack/cli-utilities": "~1.19.1",
     "@contentstack/utils": "~1.9.1",
     "@oclif/core": "^4.11.4"
   },

packages/contentstack-config/src/commands/config/set/early-access-header.ts

@@ -6,8 +6,8 @@ export default class SetEarlyAccessHeaderCommand extends Command {
   static description = 'Set Early Access header';
   static aliases: string[] = ['config:set:ea-header'];
   static flags: FlagInput = {
-    'header-alias': flags.string({ description: '(optional) Provide the Early Access header value.' }),
-    header: flags.string({ description: '(optional) Provide the Early Access header alias name.' }),
+    'header-alias': flags.string({ description: '(optional) Provide a name (alias) for this Early Access header.' }),
+    header: flags.string({ description: '(optional) Provide the Early Access header value.' }),
   };
   static examples: string[] = [
     '$ <%= config.bin %> <%= command.id %>',

packages/contentstack-utilities/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contentstack/cli-utilities",
-  "version": "1.19.0",
+  "version": "1.19.1",
   "description": "Utilities for contentstack projects",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

packages/contentstack-utilities/src/logger/logger.ts

@@ -65,7 +65,7 @@ export default class Logger {
             winston.format.printf((info) => {
               // Apply minimal redaction for files (debugging info preserved)
               const redactedInfo = this.redact(info, false);
-              return JSON.stringify(redactedInfo);
+              return this.safeStringify(redactedInfo);
             }),
           ),
         }),
@@ -117,6 +117,26 @@ export default class Logger {
     }
   }
 
+  /**
+   * Stringifies a log entry without throwing on circular references.
+   * `redact()` can fall back to the original (still-circular) object when
+   * cloning fails, so this must never assume the input is cycle-free.
+   */
+  private safeStringify(value: any): string {
+    const seen = new WeakSet();
+    try {
+      return JSON.stringify(value, (_key, val) => {
+        if (typeof val === 'object' && val !== null) {
+          if (seen.has(val)) return '[Circular]';
+          seen.add(val);
+        }
+        return val;
+      });
+    } catch {
+      return JSON.stringify({ level: value?.level, message: value?.message ?? '[Unserializable log entry]' });
+    }
+  }
+
   private shouldLog(level: LogType, target: 'console' | 'file'): boolean {
     // If console logging is disabled, don't log to console
     if (target === 'console' && this.config.consoleLoggingEnabled === false) {
@@ -186,9 +206,12 @@ export default class Logger {
       this.loggers.error.error(logPayload);
     }
 
-    // For console, use debug level if hidden, otherwise error level
+    // For console, use debug level if hidden, otherwise error level. Each level's
+    // winston logger instance bundles both the file and console transports, so only
+    // write again here when the target differs from the one already written above —
+    // otherwise this would duplicate both the console line and the file entry.
     const consoleLevel: LogType = params.hidden ? 'debug' : 'error';
-    if (this.shouldLog(consoleLevel, 'console')) {
+    if (consoleLevel !== 'error' && this.shouldLog(consoleLevel, 'console')) {
       this.loggers[consoleLevel].error(logPayload);
     }
   }