Skip to content

DX - 5352 - Added Skill Files and dependency updates#165

Open
cs-raj wants to merge 1 commit intodevelopmentfrom
fix/DX-5352
Open

DX - 5352 - Added Skill Files and dependency updates#165
cs-raj wants to merge 1 commit intodevelopmentfrom
fix/DX-5352

Conversation

@cs-raj
Copy link
Copy Markdown
Contributor

@cs-raj cs-raj commented Apr 4, 2026

DX-5352 — Agent docs, skills, and dependency updates

Summary

Adds repository guidance for humans and AI tooling (AGENTS.md, skills/, .cursor/rules/), bumps Inquirer to v12 with matching import and test updates, refreshes TypeScript, ESLint, and Contentstack dependencies, and adjusts SCA / Talisman configuration. Minor style-only edits in validate-regex (semicolons / trailing commas).

Changes

Developer & agent documentation

  • AGENTS.md — Project map, workflow (npm test, posttest), naming, pointers to @skills/* and .cursor/rules/.
  • skills/ — Portable skills: testing (Jest patterns), contentstack-cli (command/SDK/schema/output), code-review (PR checklist); skills/README.md includes concrete @skills/... paths and CI Node 22.x (aligned with .github/workflows/unit-tests.yml).
  • .cursor/rules/ — IDE rules (TypeScript, testing, oclif command, Contentstack utils, dev workflow) and README index.
  • .cursor/skills/SKILL.md — Points authoritative packages at repo-root skills/.

Dependencies & tooling

  • Inquirer 12.11.1 (pinned); default import in src/utils/interactive.ts; interactive.test.ts uses ESM-style imports and Promise.resolve mocks for inquirer.prompt (Inquirer v12 async behavior).
  • TypeScript ^5.9.3, @types/node ^18, @typescript-eslint/* ^8.58, ts-jest / jest patch bumps; Contentstack CLI packages updated.
  • Removed @types/inquirer (superseded by Inquirer v12 typings).
  • .eslintrc — Explicit @typescript-eslint/parser and parserOptions.
  • package.json version 1.3.1; package-lock.json regenerated.

CI / security

  • .github/workflows/sca-scan.yml — Snyk step json: true, continue-on-error: true, and contentstack/sca-policy@main.
  • .talismanrc — Restructured fileignoreconfig entries and checksums for current tracked files.

@cs-raj cs-raj requested a review from a team as a code owner April 4, 2026 10:02
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 4, 2026

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 0 3 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

⚠️ Warning: The following vulnerabilities have exceeded their SLA thresholds (days since publication).

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 1 90 / 365 days ⚠️ Warning
🔵 Low 0 0 180 / 365 days ✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

  • Critical without fixes: 0
  • High without fixes: 0
  • Medium without fixes: 3
  • Low without fixes: 0

⚠️ BUILD PASSED WITH WARNINGS - SLA breaches detected for issues without available fixes

Consider reviewing these vulnerabilities when fixes become available.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant