Skip to content

Release 2.4.2: Snyk dependency fixes - #200

Closed
rahul-contentstack wants to merge 11 commits into
mainfrom
staging
Closed

rahul-contentstack wants to merge 11 commits into
mainfrom
staging

Conversation

@rahul-contentstack

Copy link
Copy Markdown
Contributor

Summary

Release 2.4.2 (patch): promote staging to main with the Snyk dependency fixes.

Changes

  • Bump 2 dependencies to resolve Snyk vulnerabilities
  • Bump other dependencies to their latest in-range versions
  • Version bump 2.4.1 → 2.4.2 (package.json, package-lock.json)

Related: #191, #199

The other commits listed here (CODEOWNERS, workflow changes, 2.4.1) are already on main with the same content. They appear because staging has its own copies of those commits. The only file changes are package.json and package-lock.json.

Testing

  • npm test: 18 suites, 249 tests passed

After merge

  • Publish @contentstack/app-sdk@2.4.2 to npm and tag v2.4.2

🤖 Generated with Claude Code

rahul-contentstack and others added 11 commits June 18, 2026 12:27
Lock file regenerated (fixed 25 on its own).
Direct upgrades: axios ^1.7.9 -> ^1.21.0 (dependencies), @babel/core ^7.2.2 -> ^7.29.7 (devDependencies)
Added devDependency: @types/node ^25.6.0 (keeps the TypeScript 4.7 build working; dev-only)
Overrides: none
Vuln count: snyk 25 -> 0, npm audit 31 -> 9. Build verified passing.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Raise direct dependencies to their latest compatible versions and regenerate
package-lock.json. Keep typedoc at ^0.22.18 and pin typescript to ~4.7.4:
typedoc 0.28 needs TypeScript 5 and typedoc-plugin-rename-defaults only
supports typedoc <=0.25.

Build and tests (18 suites, 249 tests) pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@rahul-contentstack
rahul-contentstack requested review from a team as code owners November 4, 2026 11:25
@snyk-io

snyk-io Bot commented Nov 4, 2026 •

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@rahul-contentstack

Copy link
Copy Markdown
Contributor Author

Superseded by #202. This PR conflicted because the repo only allows rebase merging, so main and staging have separate commit histories.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants