chore: core version bump - #2723
Conversation
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
There was a problem hiding this comment.
🔵 Needs a closer look
Correct .talismanrc by retaining the existing entries and updating only the lockfile checksum.
Pull request overview
Bumps the core CLI to 2.0.1 and refreshes related dependencies and configuration.
Changes:
- Updates CLI and plugin dependency versions.
- Refreshes lockfile resolutions and integrity data.
- Updates Talisman configuration.
File summaries
| File | Summary |
|---|---|
pnpm-lock.yaml |
Refreshes locked dependency versions and integrity data. |
packages/contentstack/package.json |
Bumps the core CLI and dependency versions. |
.talismanrc |
Updates the checksum but removes an existing ignore entry and metadata; retain those entries. |
Review details
Files not reviewed (1)
- pnpm-lock.yaml: Generated file
Suppressed comments (1)
.talismanrc:3
- This update removes the existing Talisman ignore entry for
.github/workflows/release-production-pipeline.ymland also drops theversion: '1.0'metadata from the remaining entry. That changes secret-scan behavior for an unrelated workflow and leaves the config inconsistent with its existing generated format; retain both entries and update only the lockfile checksum.
- filename: pnpm-lock.yaml
checksum: 06cb74068888fe29d2ca0c4092dfea03c8eca2a547fe970ce09b614941b49ff7
- Files reviewed: 2/3 changed files
- Comments generated: 0
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
🔒 Security Scan Results
⏱️ SLA Breach Summary
ℹ️ Vulnerabilities Without Available Fixes (Informational Only)The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:
Consider reviewing these vulnerabilities when fixes become available. |
There was a problem hiding this comment.
🟡 Changes recommended
Restore the required Talisman configuration entries before approval.
Get a fresh assessment by requesting another Copilot review.
Review details
Files not reviewed (1)
- pnpm-lock.yaml: Generated file
Suppressed comments (1)
.talismanrc:3
- Please retain the ignore entry for
.github/workflows/release-production-pipeline.yml. This workflow is unchanged in this PR, but removing its existing Talisman exemption makes the pre-commit hook scan it (see.husky/pre-commit:31-40), so any previously suppressed finding in that file can now block commits. Restore the filename/checksum/version block, or update its checksum only if the workflow is intentionally changed.
- filename: pnpm-lock.yaml
checksum: cbcd291500cd619f18736fe4b1d2e5c98cc3699bc28feae851f054833e99ead9
- Files reviewed: 3/4 changed files
- Comments generated: 1
- Review effort level: Lite
No description provided.