Skip to content

DX | 12-08-2026 | Release | Back-merge - #117

Merged
cs-raj merged 46 commits into
developmentfrom
main
Aug 13, 2026
Merged

DX | 12-08-2026 | Release | Back-merge#117
cs-raj merged 46 commits into
developmentfrom
main

Conversation

@cs-raj

@cs-raj cs-raj commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

Back-merge of main into development following DX | 12-08-2026 | Release.

timbenniks and others added 30 commits October 20, 2025 13:53
Enhance environment variable loading: read from .env for development and process.env for production
chore: update dependencies and version to 0.0.7
chore: update @contentstack/delivery-sdk to 4.10.6
…elivery-sdk-v5

chore: upgraded contentstack-delivery-sdk to v5
[Chore] Angular v21 Upgrade & Dependencies Update - 2026-03-23
enhc: replace @timbenniks/contentstack-endpoints with @contentstack/utils
Aravind-Kumar-cstk and others added 16 commits June 19, 2026 13:04
Add @rollup/rollup-linux-x64-gnu, @rollup/rollup-linux-x64-musl,
lightningcss-linux-x64-gnu, and lightningcss-linux-x64-musl as
optionalDependencies and regenerate lockfile so Linux CI environments
can resolve native platform binaries without hitting the npm optional
dependency bug.
chore: add Linux optional dependencies for Rollup and LightningCSS
fix: resolve Snyk security and license issues
Direct dep upgrades:
  @angular/common 21.2.17 → 21.2.19
  @angular/compiler 21.2.17 → 21.2.19
  @angular/core 21.2.17 → 21.2.19
  @angular/compiler-cli 21.2.17 → 21.2.19
  @angular/platform-browser 21.2.17 → 21.2.19
  @angular/router 21.2.17 → 21.2.19
  @angular-devkit/build-angular 21.2.15 → 21.2.20
  @angular/cli 21.2.15 → 21.2.20
  postcss 8.5.24 → 8.5.26
  @contentstack/delivery-sdk ^5.2.1 → ^5.5.2
  @contentstack/live-preview-utils ^4.4.4 → ^4.4.5
  tailwindcss ^4.3.1 → ^4.3.3
  @tailwindcss/postcss ^4.3.1 → ^4.3.3
  @types/react ^19.2.17 → ^19.2.18
  @rollup/rollup-linux-x64-gnu ^4.62.0 → ^4.62.4
  @rollup/rollup-linux-x64-musl ^4.62.0 → ^4.62.4
  lightningcss-linux-x64-gnu 1.32.0 → 1.33.0
  lightningcss-linux-x64-musl 1.32.0 → 1.33.0

Overrides added:
  @babel/core@7.29.6, @hono/node-server@2.0.6, esbuild@0.28.1
  http-proxy-middleware@3.0.7, piscina@5.2.0, undici@7.29.0
  uuid@14.0.1, webpack-dev-server@5.2.6

Package version: 0.1.2 → 0.1.3
Vuln count: 15 (before) → 11 (after). Build verified passing.
fix: bump deps and add overrides to resolve Snyk vulnerabilities
@cs-raj
cs-raj requested review from a team as code owners August 13, 2026 12:13
@snyk-io

snyk-io Bot commented Aug 13, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 2 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

  • Critical without fixes: 0
  • High without fixes: 0
  • Medium without fixes: 2
  • Low without fixes: 0

✅ BUILD PASSED - All security checks passed

@cs-raj
cs-raj merged commit ab9629f into development Aug 13, 2026
7 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants