chore: GA version bumps — promote all packages from beta to 2.0.0 and update third-party deps by cs-raj · Pull Request #2688 · contentstack/cli

cs-raj · 2026-08-05T12:05:52Z

Overview

This PR prepares all packages in the `cli` monorepo for the General Availability (GA) release of CLI v2. It does two things:

Promotes every `@contentstack/*` package version from `-beta.X` to its stable GA version (all cross-repo internal dependency references updated to match).
Bumps third-party devDependencies to their latest minor/patch versions (no major version jumps; strictly minor and patch).

Package Version Promotions (self-versions)

Package	Old Version	New Version
`@contentstack/cli`	`2.0.0-beta.30`	`2.0.0`
`@contentstack/cli-auth`	`2.0.0-beta.17`	`2.0.0`
`@contentstack/cli-command`	`2.0.0-beta.11`	`2.0.0`
`@contentstack/cli-config`	`2.0.0-beta.15`	`2.0.0`
`@contentstack/cli-utilities`	`2.0.0-beta.12`	`2.0.0`

Internal `@contentstack/*` Dependency Updates

All internal dependencies in `packages/contentstack/package.json` are updated from their individual beta pins to stable `2.0.0` / `1.0.0`:

Dependency	Old	New
`@contentstack/cli-audit`	`~2.0.0-beta.16`	`~2.0.0`
`@contentstack/cli-cm-export`	`~2.0.0-beta.25`	`~2.0.0`
`@contentstack/cli-cm-import`	`~2.0.0-beta.25`	`~2.0.0`
`@contentstack/cli-auth`	`~2.0.0-beta.17`	`~2.0.0`
`@contentstack/cli-bulk-operations`	`^2.0.0-beta.5`	`^2.0.0`
`@contentstack/cli-cm-bootstrap`	`~2.0.0-beta.25`	`~2.0.0`
`@contentstack/cli-cm-branches`	`~2.0.0-beta.11`	`~2.0.0`
`@contentstack/cli-cm-clone`	`~2.0.0-beta.26`	`~2.0.0`
`@contentstack/cli-cm-export-to-csv`	`~2.0.0-beta.12`	`~2.0.0`
`@contentstack/cli-cm-import-setup`	`~2.0.0-beta.19`	`~2.0.0`
`@contentstack/cli-cm-seed`	`~2.0.0-beta.25`	`~2.0.0`
`@contentstack/cli-command`	`~2.0.0-beta.11`	`~2.0.0`
`@contentstack/cli-config`	`~2.0.0-beta.15`	`~2.0.0`
`@contentstack/cli-migration`	`~2.0.0-beta.17`	`~2.0.0`
`@contentstack/cli-utilities`	`~2.0.0-beta.12`	`~2.0.0`
`@contentstack/cli-variants`	`~2.0.0-beta.20`	`~2.0.0`

Cross-package internal refs in `cli-auth` and `cli-config` are updated similarly (e.g. `cli-command`, `cli-utilities` from `~2.0.0-beta.11/12` → `~2.0.0`).

Third-Party Dependency Bumps (minor/patch only)

`@oclif/*` ecosystem

Package	Old	New	Scope
`@oclif/core`	`^4.11.4`	`^4.11.14`	deps / devDeps
`@oclif/test`	`^4.1.18`	`^4.1.20`	devDeps
`oclif` (CLI tool)	`^4.23.0` – `^4.23.8`	`^4.23.27`	devDeps

ESLint ecosystem

Package	Old	New	Affected packages
`eslint`	`^10.5.0`	`^10.6.0`	all packages
`eslint-config-oclif`	`^6.0.15` – `^6.0.166`	`^6.0.175`	all packages (unified)

Runtime dependencies (`cli-utilities`)

Package	Old	New
`papaparse`	`^5.5.3`	`^5.5.4`
`uuid`	`^14.0.0`	`^14.0.1`

Type definitions

Package	Old	New	Affected packages
`@types/inquirer`	`^9.0.9`	`^9.0.10`	`cli-utilities`
`@types/sinon`	`^21.0.0`	`^21.0.1`	`cli-utilities`, `contentstack` (main)

README Updates

`packages/contentstack/README.md` — major structural cleanup: removed stale generated content (1100+ lines), leaving a lean, accurate reference. This was part of the `chore/readme-cleanup-v2` merge that landed on this branch.
`cli-auth`, `cli-config` — auto-regenerated by `oclif readme`: version strings updated from `2.0.0-beta.X` → `2.0.0`, Node version updated to `v22.21.1`.

What Was NOT Changed

No major version bumps — all third-party bumps are strictly minor or patch.
`@contentstack/management` and `@contentstack/utils` (1.x) — left untouched as per team convention.
`sinon` — stays at current version; jump to `^21.x` in some packages is a major version change.
`recheck` / `recheck-linux-x64` — pinned for GLIBC 2.31 compatibility on Linux x64 CI; not touched.
`@typescript-eslint/*` — alpha targets only; skipped.

Test Plan

`pnpm install` succeeds with new lockfile
`pnpm build` succeeds across all packages
`pnpm test` passes across all packages
`csdx --version` reports `2.0.0` (no beta suffix)

🤖 Generated with Claude Code

…minor Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

snyk-io · 2026-08-05T12:06:02Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-05T12:06:33Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

…ource fixes

github-actions · 2026-08-05T13:41:01Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

GitHub Actions workflow pins pnpm@10.28.0 via action-setup; bumping packageManager to 10.34.4 caused ERR_PNPM_BAD_PM_VERSION in CI. Keep packageManager aligned with the workflow config. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

github-actions · 2026-08-05T13:55:39Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

aniket-shikhare-cstk

Reviewed against v2-dev — clean, well-scoped version bump. LGTM pending the lockfile.

Verified

5 core packages promoted beta → 2.0.0 (cli-auth, cli-command, cli-config, cli-utilities, @contentstack/cli).
All internal @contentstack/cli-* ranges moved to ~2.0.0 consistently — no broken ranges, and the cross-repo deps on the plugin packages line up with cli-plugins#338.
Third-party bumps are minor/patch only (@oclif/core 4.11.4→4.11.14, eslint 10.5→10.6, oclif, papaparse, uuid) — no majors.
README --version strings updated to 2.0.0 / node-v22.

Before merge

Regenerate pnpm-lock.yaml. It wasn't touched here, so it still carries 2.0.0-beta.* specifiers that no longer match the bumped package.json. CI uses --no-frozen-lockfile so it won't fail, but we shouldn't tag GA on a stale lock. pnpm install + commit.

Release ordering: @contentstack/cli@2.0.0 depends on the plugin packages at ~2.0.0, so cli-plugins#338 must publish at 2.0.0 before/with this one.

chore: GA version bumps — drop beta, bump third-party deps to latest …

81ef335

…minor Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

cs-raj requested a review from a team as a code owner August 5, 2026 12:05

cs-raj requested review from harshitha-cstk and netrajpatel August 5, 2026 12:05

docs: comprehensive README audit, package.json standardization, and s…

d284af9

…ource fixes

aniket-shikhare-cstk reviewed Aug 5, 2026

View reviewed changes

Navigation Menu

Uh oh!

chore: GA version bumps — promote all packages from beta to 2.0.0 and update third-party deps - #2688

chore: GA version bumps — promote all packages from beta to 2.0.0 and update third-party deps#2688
cs-raj wants to merge 3 commits into
v2-devfrom
chore/ga-version-bumps

cs-raj commented Aug 5, 2026 •

edited

Loading

Uh oh!

snyk-io Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 5, 2026

Uh oh!

github-actions Bot commented Aug 5, 2026

Uh oh!

github-actions Bot commented Aug 5, 2026

Uh oh!

aniket-shikhare-cstk left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

cs-raj commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Overview

Package Version Promotions (self-versions)

Internal `@contentstack/*` Dependency Updates

Third-Party Dependency Bumps (minor/patch only)

`@oclif/*` ecosystem

ESLint ecosystem

Runtime dependencies (`cli-utilities`)

Type definitions

README Updates

What Was NOT Changed

Test Plan

Uh oh!

snyk-io Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actions Bot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

github-actions Bot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

github-actions Bot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

aniket-shikhare-cstk left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

cs-raj commented Aug 5, 2026 •

edited

Loading

snyk-io Bot commented Aug 5, 2026 •

edited

Loading