Skip to content

Back merge - #2738

Merged
cs-raj merged 10 commits into
developmentfrom
main
Oct 22, 2026
Merged

Back merge#2738
cs-raj merged 10 commits into
developmentfrom
main

Conversation

@cs-raj

@cs-raj cs-raj commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

No description provided.

cs-raj and others added 10 commits October 6, 2026 14:40
@cs-raj
Merge pull request #2730 from contentstack/development
f555ef6 
DX | 29-09-2026 | Release
@Aravind-Kumar-cstk
Updated codeowners
c87b4ac
@cs-raj
core version bump
ba4bf50
@cs-raj
Merge branch 'main' into chore/core-version-bump
52ac1ee
@dhaval-jain-cstk
Merge pull request #2736 from contentstack/chore/core-version-bump
3f776c5 
core version bump
@alok-cstk
Add GitGuardian secret scan on publish (postpack hook, blocking); ins…
f6f6b25 
…tall ggshield in release workflows (IS-7341)
@alok-cstk
Fix: split .cache_ggshield gitignore line; correct contentstack-confi…
57aac1c 
…g postpack to scan tarball
@alok-cstk
Fix: remove stray 'git branch' text accidentally inserted into clean:…
ee8d568 
…modules script
@cs-raj @claude
fix(deps): bump qs and traverse overrides
eaa0211 
qs 6.16.1 clears SNYK-JS-QS-20943482 (High), which the security-sca policy
counted once per vulnerable path (39) against a limit of 25.
traverse 0.6.14 clears SNYK-JS-TRAVERSE-20570510 (Medium) so the pre-commit
Snyk scan passes; 0.6.12 is deprecated upstream.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@alok-cstk
Merge pull request #2737 from contentstack/feat/gitguardian-publish-scan
b639944 
GitGuardian secret scan on package publish (blocking)
@cs-raj
cs-raj requested review from a team as code owners October 22, 2026 09:17
@snyk-io

snyk-io Bot commented Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions

github-actions Bot commented Oct 22, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 131 25 ✅ Passed
🟡 Medium Severity 1 232 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 1 90 / 365 days ⚠️ Warning
🔵 Low 0 0 180 / 365 days ✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

  • Critical without fixes: 0
  • High without fixes: 131
  • Medium without fixes: 232
  • Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

@cs-raj
cs-raj merged commit 8ae4b0f into development Oct 22, 2026
12 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Aravind-Kumar-cstk Aravind-Kumar-cstk Aravind-Kumar-cstk approved these changes
@vaishnavi-kedar-cstk vaishnavi-kedar-cstk vaishnavi-kedar-cstk approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@cs-raj @Aravind-Kumar-cstk @vaishnavi-kedar-cstk @dhaval-jain-cstk @alok-cstk