From 3766ad2e979249c1a24e89d407d0f170375de47c Mon Sep 17 00:00:00 2001 From: raj pandey Date: Tue, 6 Oct 2026 14:31:49 +0530 Subject: [PATCH 1/2] fix(deps): bump @contentstack/management to ~1.31.2 and overrides Move cli and cli-utilities to @contentstack/management ~1.31.2 (resolves security vulnerabilities in its dependencies) and raise the workspace overrides js-yaml 5.4.2 -> 5.4.3 and fast-uri 4.1.5 -> 4.2.1. pnpm-lock.yaml is re-resolved accordingly; no package versions change. Co-Authored-By: Claude Fable 5.1 --- .talismanrc | 2 +- packages/contentstack-utilities/package.json | 2 +- packages/contentstack/package.json | 2 +- pnpm-lock.yaml | 50 ++++++++++---------- pnpm-workspace.yaml | 4 +- 5 files changed, 30 insertions(+), 30 deletions(-) diff --git a/.talismanrc b/.talismanrc index ec65eab3dc..9ad775c61f 100644 --- a/.talismanrc +++ b/.talismanrc @@ -1,3 +1,3 @@ fileignoreconfig: - filename: pnpm-lock.yaml - checksum: cbcd291500cd619f18736fe4b1d2e5c98cc3699bc28feae851f054833e99ead9 + checksum: 54df7ffaf110fe295575c566adaea82e34e96c3adafb525b14180bd8ddf7a01a diff --git a/packages/contentstack-utilities/package.json b/packages/contentstack-utilities/package.json index 10efbf1610..771047e732 100644 --- a/packages/contentstack-utilities/package.json +++ b/packages/contentstack-utilities/package.json @@ -28,7 +28,7 @@ "author": "contentstack", "license": "MIT", "dependencies": { - "@contentstack/management": "~1.31.1", + "@contentstack/management": "~1.31.2", "@contentstack/marketplace-sdk": "^1.5.4", "@contentstack/utils": "~1.9.1", "@oclif/core": "^4.11.14", diff --git a/packages/contentstack/package.json b/packages/contentstack/package.json index da7ae4e13a..3ceafc876b 100755 --- a/packages/contentstack/package.json +++ b/packages/contentstack/package.json @@ -35,7 +35,7 @@ "@contentstack/cli-migration": "~2.0.1", "@contentstack/cli-utilities": "~2.0.2", "@contentstack/cli-variants": "~2.0.1", - "@contentstack/management": "~1.31.1", + "@contentstack/management": "~1.31.2", "@contentstack/utils": "~1.9.1", "@oclif/core": "^4.11.14", "@oclif/plugin-help": "^6.2.53", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 3903172793..028a298aaa 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -9,8 +9,8 @@ overrides: uuid: 14.0.2 lodash: 4.18.1 brace-expansion: 5.0.12 - js-yaml: 5.4.2 - fast-uri: 4.1.5 + js-yaml: 5.4.3 + fast-uri: 4.2.1 qs: 6.16.0 importers: @@ -75,8 +75,8 @@ importers: specifier: ~2.0.1 version: 2.0.1(@types/node@18.19.130)(debug@4.4.3) '@contentstack/management': - specifier: ~1.31.1 - version: 1.31.1(debug@4.4.3) + specifier: ~1.31.2 + version: 1.31.2(debug@4.4.3) '@contentstack/utils': specifier: ~1.9.1 version: 1.9.1 @@ -373,8 +373,8 @@ importers: packages/contentstack-utilities: dependencies: '@contentstack/management': - specifier: ~1.31.1 - version: 1.31.1(debug@4.4.3) + specifier: ~1.31.2 + version: 1.31.2(debug@4.4.3) '@contentstack/marketplace-sdk': specifier: ^1.5.4 version: 1.5.4(debug@4.4.3) @@ -418,8 +418,8 @@ importers: specifier: ^1.2.6 version: 1.2.6 js-yaml: - specifier: 5.4.2 - version: 5.4.2 + specifier: 5.4.3 + version: 5.4.3 klona: specifier: ^2.0.6 version: 2.0.6 @@ -748,8 +748,8 @@ packages: resolution: {integrity: sha512-gzRW5eaz3WrwZXnIs8n/yKX5fzsgNSs5bXwyGG8E51c81iTbYvBlFJAhaordZqkmTDrwD3KKezTpA+0GVeKiFA==} engines: {node: '>=18'} - '@contentstack/management@1.31.1': - resolution: {integrity: sha512-tl0Egw40B7DC+rpPDpGM4CU79m9lQKDtkHxtqEfwdC86K4b0xOUt2ZYwOlrwyr9ShE/QB8Q33abC1a9+1823uQ==} + '@contentstack/management@1.31.2': + resolution: {integrity: sha512-otLgLkS/W5yhzQf/R5EsEWE1NwjC+eWesqo2uQIPE75HGdyuU0TrOwsvdQ4a2MwX42iNkhE5ZwmOFN6Ovjnsuw==} engines: {node: '>=8.0.0'} '@contentstack/marketplace-sdk@1.5.4': @@ -2587,8 +2587,8 @@ packages: fast-levenshtein@3.0.0: resolution: {integrity: sha512-hKKNajm46uNmTlhHSyZkmToAc56uZJwYq7yrciZjqOxnlfQwERDQJmHPUp7m1m9wx8vgOe8IaCKZ5Kv2k1DdCQ==} - fast-uri@4.1.5: - resolution: {integrity: sha512-vZeoMRB4epNr7QfdHxel7te/RcX16CxyXI07JCCTFWZA2s4v1azGNESRj+2EoaHSaWFL/Z3GmKT2jF6A202jLg==} + fast-uri@4.2.1: + resolution: {integrity: sha512-TmHQgewjHtMq1E5QKA0tOE0yeYGQs25KZC/ziJpubRtWI15W92e6vPFydWOeZBVROSHBYw/QhD9d5OefdD6LDg==} fastest-levenshtein@1.0.16: resolution: {integrity: sha512-eRnCtTTtGZFpQCwhJiUOuxPQWRXVKYDn0b2PeHfXL6/Zi53SLAzAHfVhVWK2AryC/WH05kGfxhFIPvTF0SXQzg==} @@ -3281,8 +3281,8 @@ packages: js-tokens@4.0.0: resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} - js-yaml@5.4.2: - resolution: {integrity: sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==} + js-yaml@5.4.3: + resolution: {integrity: sha512-yzzNtgczwgoVHNigCyKTXcQJU4Y8t/ikU4UxXW0BvrLfHTGWZhsNcOT2s/a7vn81/4KqVnNmHjaUEPlvWnNwVw==} hasBin: true jsdoc-type-pratt-parser@4.1.0: @@ -5218,7 +5218,7 @@ snapshots: '@contentstack/cli-command': 2.0.1(@types/node@18.19.130)(debug@4.4.3) '@contentstack/cli-utilities': 2.0.1(@types/node@18.19.130)(debug@4.4.3) '@contentstack/delivery-sdk': 5.6.0(debug@4.4.3) - '@contentstack/management': 1.31.1(debug@4.4.3) + '@contentstack/management': 1.31.2(debug@4.4.3) chalk: 5.6.2 lodash: 4.18.1 tslib: 2.8.1 @@ -5408,7 +5408,7 @@ snapshots: '@contentstack/cli-utilities@2.0.1(@types/node@18.19.130)(debug@4.4.3)': dependencies: - '@contentstack/management': 1.31.1(debug@4.4.3) + '@contentstack/management': 1.31.2(debug@4.4.3) '@contentstack/marketplace-sdk': 1.5.4(debug@4.4.3) '@contentstack/utils': 1.9.1 '@oclif/core': 4.14.0 @@ -5423,7 +5423,7 @@ snapshots: inquirer: 12.11.1(@types/node@18.19.130) inquirer-search-checkbox: 1.0.0 inquirer-search-list: 1.2.6 - js-yaml: 5.4.2 + js-yaml: 5.4.3 klona: 2.0.6 lodash: 4.18.1 mkdirp: 1.0.4 @@ -5477,7 +5477,7 @@ snapshots: - debug - supports-color - '@contentstack/management@1.31.1(debug@4.4.3)': + '@contentstack/management@1.31.2(debug@4.4.3)': dependencies: '@contentstack/utils': 1.9.1 assert: 2.1.0 @@ -5597,7 +5597,7 @@ snapshots: globals: 14.0.0 ignore: 5.3.2 import-fresh: 3.3.1 - js-yaml: 5.4.2 + js-yaml: 5.4.3 minimatch: 3.1.5 strip-json-comments: 3.1.1 transitivePeerDependencies: @@ -5966,7 +5966,7 @@ snapshots: camelcase: 5.3.1 find-up: 4.1.0 get-package-type: 0.1.0 - js-yaml: 5.4.2 + js-yaml: 5.4.3 resolve-from: 5.0.0 '@istanbuljs/schema@0.1.6': {} @@ -6813,7 +6813,7 @@ snapshots: ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 4.1.5 + fast-uri: 4.2.1 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -7749,7 +7749,7 @@ snapshots: tinyglobby: 0.2.17 unrs-resolver: 1.12.2 optionalDependencies: - eslint-plugin-import: 2.32.0(@typescript-eslint/parser@6.21.0(eslint@10.9.1)(typescript@4.9.5))(eslint-import-resolver-typescript@3.10.1)(eslint@10.9.1) + eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.69.0(eslint@10.9.1)(typescript@4.9.5))(eslint-import-resolver-typescript@3.10.1)(eslint@10.9.1) transitivePeerDependencies: - supports-color @@ -8213,7 +8213,7 @@ snapshots: dependencies: fastest-levenshtein: 1.0.16 - fast-uri@4.1.5: {} + fast-uri@4.2.1: {} fastest-levenshtein@1.0.16: {} @@ -8921,7 +8921,7 @@ snapshots: js-tokens@4.0.0: {} - js-yaml@5.4.2: + js-yaml@5.4.3: dependencies: argparse: 2.0.1 @@ -9198,7 +9198,7 @@ snapshots: find-up: 5.0.0 glob: 8.1.0 he: 1.2.0 - js-yaml: 5.4.2 + js-yaml: 5.4.3 log-symbols: 4.1.0 minimatch: 5.1.9 ms: 2.1.3 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index e309511df1..97571023df 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -5,6 +5,6 @@ overrides: uuid: 14.0.2 lodash: 4.18.1 brace-expansion: 5.0.12 - js-yaml: 5.4.2 - fast-uri: 4.1.5 + js-yaml: 5.4.3 + fast-uri: 4.2.1 qs: 6.16.0 \ No newline at end of file From 6df4dd1bf7e6e0b0a655a45343cb2957d52fda6a Mon Sep 17 00:00:00 2001 From: raj pandey Date: Tue, 6 Oct 2026 14:33:07 +0530 Subject: [PATCH 2/2] talisman updated --- .talismanrc | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.talismanrc b/.talismanrc index 9ad775c61f..d25a727190 100644 --- a/.talismanrc +++ b/.talismanrc @@ -1,3 +1,6 @@ fileignoreconfig: -- filename: pnpm-lock.yaml - checksum: 54df7ffaf110fe295575c566adaea82e34e96c3adafb525b14180bd8ddf7a01a + - filename: pnpm-lock.yaml + ignore_detectors: + - filecontent + - base64content +version: '1.0' \ No newline at end of file