Skip to content

DX | 29-09-2026 | Release - #399

Merged
cs-raj merged 7 commits into
mainfrom
development
Oct 5, 2026
Merged

DX | 29-09-2026 | Release#399
cs-raj merged 7 commits into
mainfrom
development

Conversation

@cs-raj

@cs-raj cs-raj commented Sep 29, 2026

Copy link
Copy Markdown
Contributor

No description provided.

aniket-shikhare-cstk and others added 5 commits August 31, 2026 04:17
@aniket-shikhare-cstk
fix: remove unsupported asset_fields params from dev11 API tests
3822092 
embedded_metadata and ai_generated_metadata are not supported on dev11
CDA — API returns HTTP 422. Restrict assetFields() calls to the two
supported values (user_defined_fields, visual_markups) in asset.spec.ts,
asset-query.spec.ts, entries.spec.ts, and entry.spec.ts.

Generated by Claude Code
@aniket-shikhare-cstk
Merge pull request #396 from contentstack/fix/asset-fields-cda-params
a9abc63 
fix: remove unsupported asset_fields params from CDA API tests
@cs-raj
Merge branch 'main' into development
270f180
@cs-raj
back merge
67d2fce
@cs-raj
Merge pull request #398 from contentstack/fix/back-merge
1b8fb20 
Fix back merge
@cs-raj
cs-raj requested a review from a team as a code owner September 29, 2026 07:00
Copilot AI balanced review requested due to automatic review settings September 29, 2026 07:00
@snyk-io

snyk-io Bot commented Sep 29, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions

github-actions Bot commented Sep 29, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 2 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

  • Critical without fixes: 0
  • High without fixes: 0
  • Medium without fixes: 2
  • Low without fixes: 0

✅ BUILD PASSED - All security checks passed

@github-actions

github-actions Bot commented Sep 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Coverage report

St.❔
 Category Percentage Covered / Total
🟢 Statements 98.9% 993/1004
🟢 Branches 96.52% 305/316
🟢 Functions 97.79% 221/226
🟢 Lines 99.37% 945/951

Test suite run success

720 tests passing in 36 suites.

Report generated by 🧪jest coverage report action from 3984a7e

Copilot AI reviewed Sep 29, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Documented asset-field options lose their only live CDA coverage across four API paths.

Review effort: Balanced
Findings: 4 Medium severity

Open (4)
What changed in this PR

Updates release dependencies and narrows API tests for asset-field parameters.

Changes:

  • Upgrades Axios and Playwright.
  • Refreshes transitive dependency locks.
  • Removes two documented asset-field values from API tests.
File Description
test/​api/​entry.spec.ts Narrows entry asset-field coverage.
test/​api/​entries.spec.ts Narrows entries asset-field coverage.
test/​api/​asset.spec.ts Narrows asset fetch coverage.
test/​api/​asset-query.spec.ts Narrows asset query coverage.
package.json Upgrades Axios and Playwright.
package-lock.json Locks updated dependency graph.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread test/api/asset-query.spec.ts
Comment thread test/api/asset.spec.ts
Comment thread test/api/entries.spec.ts
Comment thread test/api/entry.spec.ts
cs-raj and others added 2 commits October 1, 2026 14:12
@cs-raj @claude
chore(release): publish to npm with trusted publishing
43f0338 
Publish on release:published from release.yml so the npm trusted publisher can
be keyed on the filename, drop NODE_AUTH_TOKEN in favour of id-token: write
(OIDC), run on Node 24 with npm@latest (trusted publishing needs npm >= 11.5.1),
check out the release tag without persisted credentials. GitHub pre-releases go
to the beta dist-tag. The GitHub Packages job gains the packages: write
permission it was missing and publishes with the job's own token instead of a
personal token. package.json gains the repository field that provenance
validation requires.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@cs-raj
Merge pull request #400 from contentstack/feat/DX-27614
3984a7e 
chore(release): publish to npm with trusted publishing
Copilot AI balanced review requested due to automatic review settings October 5, 2026 07:52
@cs-raj
cs-raj requested a review from a team as a code owner October 5, 2026 07:52
@github-actions

github-actions Bot commented Oct 5, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 2 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

  • Critical without fixes: 0
  • High without fixes: 0
  • Medium without fixes: 2
  • Low without fixes: 0

✅ BUILD PASSED - All security checks passed

Copilot AI reviewed Oct 5, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Prereleases would be tagged as latest on GitHub Packages, and documented asset-field variants lose API coverage.

Review effort: Balanced
Findings: 1 High severity · 4 Medium severity

Open (5)

Comment thread .github/workflows/release.yml
@cs-raj
cs-raj merged commit a946c02 into main Oct 5, 2026
11 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@Aravind-Kumar-cstk Aravind-Kumar-cstk Aravind-Kumar-cstk approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@cs-raj @Aravind-Kumar-cstk @aniket-shikhare-cstk