DX | 03-08-2026 | Release by cs-raj · Pull Request #64 · contentstack/datasync-asset-store-filesystem

cs-raj · 2026-08-02T15:19:05Z

Security

Updated dependencies to resolve Snyk-identified security vulnerabilities.

chore: back-merge master into development

snyk-io · 2026-08-02T15:19:18Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-02T15:19:43Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

DX | 03-08-2026 | Release | Back-merge

github-actions · 2026-08-04T08:58:56Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	1	25	✅ Passed
🟡 Medium Severity	0	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

DX | 12-08-2026 | Release | Back-merge

github-actions · 2026-08-13T12:23:35Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

Publish on release:published with plain npm publish and id-token: write (OIDC) instead of JS-DevTools/npm-publish with NPM_TOKEN, run on Node 24 with npm@latest (trusted publishing needs npm >= 11.5.1), install with npm ci, check out the release tag without persisted credentials, and drop the post-publish gh release create step: the release is the trigger now, and the step failed with 403 under the read-only job token. GitHub pre-releases go to the beta dist-tag. .nvmrc pins 24 to match the publish job. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

Refuse to publish when the release tag is not "v" + the package.json version, so a tag cut on the wrong commit cannot publish an older version under a newer tag. The tag reaches the check through an env variable, never through a shell line. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…indings undici: ^7.29.0 -> ^7.29.1 (lock resolves 7.29.0 -> 7.30.0) brace-expansion override: 5.0.9 -> 5.0.12 Snyk findings: 13 -> 0 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Lock file regenerated (fixed 18 on its own). Direct upgrades: undici ^7.30.1, jest ^29.7.0, @types/node 10.17.60, supertest 3.4.2, tslint 5.20.1, typescript ^5.9.3 Overrides: brace-expansion 5.0.9 -> 5.0.12 Vuln count: snyk 21 -> 0, npm audit 34 -> 34. Build verified passing. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

…evelopment chore: back-merge master into development + Snyk fixes

snyk-io · 2026-10-22T12:10:07Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-10-22T12:10:39Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

# Conflicts: # package-lock.json # package.json

chore(release): publish to npm with trusted publishing

github-actions · 2026-10-29T09:07:38Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	500	✅ Passed
🔵 Low Severity	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

development was at 2.3.9 while the last published version on npm is 2.3.7 and master is at 2.3.8 (never published). Set development to 2.3.8 so the next release is a single patch on top of 2.3.7. Only package.json and package-lock.json change (version fields). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

chore: set version to 2.3.8

github-actions · 2026-11-02T07:12:04Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

✅ BUILD PASSED - All security checks passed

Lock file

github-actions · 2026-11-02T11:18:28Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Without fixes	Threshold	Result
🔴 Critical Severity	0	10	✅ Passed
🟠 High Severity	0	25	✅ Passed
🟡 Medium Severity	1	500	✅ Passed
🔵 Low Severity	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

Critical without fixes: 0
High without fixes: 0
Medium without fixes: 1
Low without fixes: 0

✅ BUILD PASSED - All security checks passed

harshithad0703 and others added 3 commits May 20, 2026 15:10

Merge pull request #54 from contentstack/master

7e962d1

chore: back-merge master into development

Merge pull request #56 from contentstack/master

5e84b6d

chore: back-merge master into development

Merge pull request #63 from contentstack/master

9b39ec2

chore: back-merge master into development

Merge pull request #66 from contentstack/master

426bb66

DX | 03-08-2026 | Release | Back-merge

harshitha07d force-pushed the development branch from 789943a to 426bb66 Compare August 7, 2026 11:01

harshitha07d requested a review from a team as a code owner August 7, 2026 11:01

harshitha07d requested a review from a team August 7, 2026 11:01

harshitha07d force-pushed the master branch from 3308176 to 5c7b2e3 Compare August 7, 2026 12:45

Merge pull request #68 from contentstack/master

3706041

DX | 12-08-2026 | Release | Back-merge

cs-raj and others added 6 commits October 5, 2026 10:49

fix: bump undici and raise brace-expansion override to resolve Snyk f…

fc745ed

…indings undici: ^7.29.0 -> ^7.29.1 (lock resolves 7.29.0 -> 7.30.0) brace-expansion override: 5.0.9 -> 5.0.12 Snyk findings: 13 -> 0 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

chore: back-merge master into development

df11388

Merge pull request #71 from contentstack/chore/back-merge-master-to-d…

96bba66

…evelopment chore: back-merge master into development + Snyk fixes

cs-raj requested a review from a team as a code owner October 22, 2026 12:09

cs-raj added 2 commits October 24, 2026 19:36

Merge remote-tracking branch 'origin/development' into feat/DX-27614

e43f79a

# Conflicts: # package-lock.json # package.json

Merge pull request #69 from contentstack/feat/DX-27614

8f9ef1a

chore(release): publish to npm with trusted publishing

cs-raj and others added 2 commits November 2, 2026 12:37

Merge pull request #73 from contentstack/chore/revert-version-2.3.8

89b5205

chore: set version to 2.3.8

reeshika-h previously approved these changes Nov 2, 2026

View reviewed changes

Merge branch 'master' into development

bcf69cf

cs-raj and others added 2 commits November 2, 2026 16:41

lock file update

55df2c2

Merge pull request #74 from contentstack/fix/lockfile

99ff722

Lock file

reeshika-h dismissed their stale review via 99ff722 November 2, 2026 11:17

reeshika-h approved these changes Nov 2, 2026

View reviewed changes

dhaval-jain-cstk approved these changes Nov 2, 2026

View reviewed changes

cs-raj merged commit f34e74f into master Nov 2, 2026
10 checks passed

Navigation Menu

Repository navigation

DX | 03-08-2026 | Release - #64

DX | 03-08-2026 | Release#64
cs-raj merged 18 commits into
masterfrom
development

cs-raj commented Aug 2, 2026

Uh oh!

snyk-io Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 2, 2026

Uh oh!

github-actions Bot commented Aug 4, 2026

Uh oh!

github-actions Bot commented Aug 13, 2026

Uh oh!

snyk-io Bot commented Oct 22, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 22, 2026

Uh oh!

github-actions Bot commented Oct 29, 2026

Uh oh!

github-actions Bot commented Nov 2, 2026

Uh oh!

github-actions Bot commented Nov 2, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

cs-raj commented Aug 2, 2026

Security

Uh oh!

snyk-io Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actions Bot commented Aug 2, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

github-actions Bot commented Aug 4, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

github-actions Bot commented Aug 13, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

snyk-io Bot commented Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actions Bot commented Oct 22, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

github-actions Bot commented Oct 29, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

github-actions Bot commented Nov 2, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

github-actions Bot commented Nov 2, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

snyk-io Bot commented Aug 2, 2026 •

edited

Loading

snyk-io Bot commented Oct 22, 2026 •

edited

Loading