DX | 13-07-2026 | Release

.talismanrc

@@ -1,4 +1,4 @@
 fileignoreconfig:
   - filename: pnpm-lock.yaml
-    checksum: 07642e8dd04d580185a459e5b088d8a1bb4e91be4e04f4842bf4fe4775205bf6
+    checksum: 4be4721031793b5ec6957b17778969b715ded2d15a6b6231b6c066735abd7233
 version: '1.0'

packages/contentstack-apps-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contentstack/apps-cli",
-  "version": "1.7.1",
+  "version": "1.7.2",
   "description": "App ClI",
   "author": "Contentstack CLI",
   "homepage": "https://github.com/contentstack/cli-plugins/tree/main/packages/contentstack-apps-cli",

packages/contentstack-apps-cli/src/commands/app/install.ts

@@ -26,7 +26,7 @@ export default class Install extends AppCLIBaseCommand {
       description: commonMsg.APP_UID,
     }),
     "stack-api-key": flags.string({
-      description: commonMsg.STACK_API_KEY,
+      description: commonMsg.STACK_API_KEY_placeholder,
     }),
     ...AppCLIBaseCommand.baseFlags,
   };
@@ -88,7 +88,7 @@ export default class Install extends AppCLIBaseCommand {
       // in case a stack app is selected and no stack-api-key is provided
       if (appType === "stack" && !this.flags["stack-api-key"]) {
         this.log(
-          $t(installAppMsg.MISSING_STACK_API_KEY, {
+          $t(installAppMsg.MISSING_STACK_API_KEY_placeholder, {
             app: app?.name || app?.uid,
           }),
           "warn"

packages/contentstack-apps-cli/src/commands/app/reinstall.ts

@@ -25,7 +25,7 @@ export default class Reinstall extends AppCLIBaseCommand {
       description: commonMsg.APP_UID,
     }),
     "stack-api-key": flags.string({
-      description: commonMsg.STACK_API_KEY,
+      description: commonMsg.STACK_API_KEY_placeholder,
     }),
     ...AppCLIBaseCommand.baseFlags,
   };
@@ -84,7 +84,7 @@ export default class Reinstall extends AppCLIBaseCommand {
         appType = "stack";
 
         this.log(
-          $t(reinstallAppMsg.MISSING_STACK_API_KEY, {
+          $t(reinstallAppMsg.MISSING_STACK_API_KEY_placeholder, {
             app: app?.name || app?.uid,
           }),
           "warn"

packages/contentstack-apps-cli/src/messages/index.ts

@@ -38,7 +38,7 @@ const commonMsg = {
   APP_UID: "Provide the app UID of an existing app.",
   APP_TYPE_DESCRIPTION: "Type of app",
   CONTACT_SUPPORT: "Contact the support team for help.",
-  STACK_API_KEY: "API key of the stack where the app operation is to be performed.",
+  STACK_API_KEY_placeholder: "API key of the stack where the app operation is to be performed.",
   USER_TERMINATION: "Process terminated by the user.",
   CLI_APP_CLI_LOGIN_FAILED: "You're not logged in. Run $ csdx auth:login to continue."
 };
@@ -97,7 +97,7 @@ const installAppMsg = {
   CHOOSE_A_STACK: "Please select a stack",
   APP_INSTALLED_SUCCESSFULLY: "{app} installed successfully in {target}.",
   INSTALL_ORG_APP_TO_STACK: "{app} is an organization app. It cannot be installed to a stack. Do you want to proceed?",
-  MISSING_STACK_API_KEY: "As {app} is a stack app, it can only be installed in a stack. Please select a stack.",
+  MISSING_STACK_API_KEY_placeholder: "As {app} is a stack app, it can only be installed in a stack. Please select a stack.",
   INSTALLING_APP_NOTICE: "Installing {app} on {type} {target}.",
   APP_ALREADY_INSTALLED: "Please use $ csdx app:reinstall to reinstall the app.",
 }
@@ -115,7 +115,7 @@ const reinstallAppMsg = {
   CHOOSE_A_STACK: "Please select a stack",
   APP_REINSTALLED_SUCCESSFULLY: "{app} reinstalled successfully in {target}.",
   REINSTALL_ORG_APP_TO_STACK: "{app} is an organization app. It cannot be reinstalled to a stack. Do you want to proceed?",
-  MISSING_STACK_API_KEY: "As {app} is a stack app, it can only be reinstalled in a stack. Please select a stack.",
+  MISSING_STACK_API_KEY_placeholder: "As {app} is a stack app, it can only be reinstalled in a stack. Please select a stack.",
   REINSTALLING_APP_NOTICE: "Reinstalling {app} on {type} {target}.",
   APP_UID: "Provide the app UID of an existing app to be reinstalled.",
   APP_ALREADY_LATEST_VERSION: "The application is already up to date; no new version is available.",

packages/contentstack-bulk-operations/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contentstack/cli-bulk-operations",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "description": "Contentstack CLI plugin for bulk operations",
   "author": "Contentstack CLI",
   "homepage": "https://github.com/contentstack/cli-plugins/tree/main/packages/contentstack-bulk-operations",

packages/contentstack-bulk-operations/src/base-bulk-command.ts

@@ -61,7 +61,7 @@
     }),
     'stack-api-key': flags.string({
       char: 'k',
-      description: messages.STACK_API_KEY,
+      description: messages.STACK_API_KEY_placeholder,
     }),
     operation: flags.string({
       description: messages.OPERATION,
@@ -124,8 +124,8 @@
 
   protected managementStack!: ManagementStack;
   protected deliveryStack!: DeliveryStack | null;
   protected logger: any;
   protected loggerContext: any;
   protected bulkOperationConfig!: BulkOperationConfig;
   protected bulkService!: BulkOperationService;
   protected queueManager!: QueueManager;
@@ -133,7 +133,7 @@
   protected retryStrategy!: RetryStrategy;
   protected operationExecutor!: OperationExecutor;
   private batchResults: Map<string, BulkJobResult> = new Map();
   protected parsedFlags: any;
 
   /**
    * Initialize common components
@@ -184,7 +184,7 @@
    * Initialize for revert/retry operations
    * All configuration is loaded from the log file - no other flags needed
    */
   private async initForRevertOrRetry(flags: any): Promise<void> {
     const logPath = flags.revert || flags['retry-failed'];
     const isRetry = !!flags['retry-failed'];
 
@@ -230,7 +230,7 @@
     let stackConfig;
     try {
       stackConfig = setupStackConfig(flags, this.cmaHost, this.cdaHost);
     } catch (error: any) {
       throw error;
     }
 
@@ -247,7 +247,7 @@
     if (flags.branch && !flags.revert && !flags['retry-failed']) {
       try {
         await validateBranch(this.managementStack, flags.branch, this.logger);
       } catch (error: any) {
         throw error;
       }
     }
@@ -259,7 +259,7 @@
         // Store environment UIDs in config for filtering operations
         this.bulkOperationConfig.environmentUids = environmentUids;
         this.logger.debug(`Stored environment UIDs in config: ${environmentUids.join(', ')}`, this.loggerContext);
       } catch (error: any) {
         throw error;
       }
     }
@@ -268,7 +268,7 @@
   /**
    * Build operation configuration
    */
   protected async buildConfiguration(flags: any): Promise<void> {
     this.bulkOperationConfig = buildConfig(flags);
 
     // buildConfig splits comma-separated oclif `multiple` values; mirror onto flags so
@@ -348,7 +348,7 @@
   /**
    * Show operation summary and get confirmation
    */
   protected async confirmOperation(items?: any[]): Promise<boolean> {
     const flags = this.parsedFlags || (await this.parse(this.constructor as typeof BaseBulkCommand)).flags;
     const itemCount = items?.length || 0;
 
@@ -362,7 +362,7 @@
    * @param items - Items to process
    * @returns Aggregated results from all operations
    */
   protected async executeBulkOperation(items: any[]): Promise<BulkOperationResult> {
     this.logger.debug($t(messages.EXECUTING_OPERATION, { count: items.length }), this.loggerContext);
     const startTime = Date.now();
 

packages/contentstack-bulk-operations/src/messages/index.ts

@@ -291,7 +291,7 @@ const interactiveMsg = {
   ENTER_ENVIRONMENTS: 'Enter target environments (comma-separated):',
   ENTER_LOCALES: 'Enter locales (comma-separated):',
   SELECT_ALIAS: 'Select alias:',
-  ENTER_API_KEY: 'Enter stack API key:',
+  ENTER_API_KEY_placeholder: 'Enter stack API key:',
   ENTER_SOURCE_ENV: 'Enter source environment name:',
   SELECT_SOURCE_ALIAS: 'Select delivery token alias for source environment:',
 
@@ -322,7 +322,8 @@ const flagDescriptions = {
   // Common flags
   ALIAS:
     'Uses the name of a saved Management Token to authenticate the command. The command can only access the branches allowed for that token. This option can be used as an alternative to` --stack-api-key.`',
-  STACK_API_KEY: 'API key of the source stack. You must use either the --stack-api-key flag or the --alias flag.',
+  STACK_API_KEY_placeholder:
+    'API key of the source stack. You must use either the --stack-api-key flag or the --alias flag.',
   OPERATION: 'Specifies whether to `publish` or `unpublish` content.',
   ENVIRONMENTS:
     'Specifies one or more environments where the entries or assets should be published. Separate multiple environments with spaces.',

packages/contentstack-bulk-operations/src/utils/interactive.ts

@@ -62,7 +62,7 @@ async function promptForStackCredentials(): Promise<{ alias?: string; apiKey?: s
     const apiKey = await cliux.inquire<string>({
       type: 'input',
       name: 'apiKey',
-      message: messages.ENTER_API_KEY,
+      message: messages.ENTER_API_KEY_placeholder,
       validate: (value) => {
         if (!value || value.trim().length === 0) {
           return messages.API_KEY_REQUIRED;
@@ -97,7 +97,7 @@ async function promptForStackCredentials(): Promise<{ alias?: string; apiKey?: s
   const apiKey = await cliux.inquire<string>({
     type: 'input',
     name: 'apiKey',
-    message: messages.ENTER_API_KEY,
+    message: messages.ENTER_API_KEY_placeholder,
     validate: (value) => {
       if (!value || value.trim().length === 0) {
         return messages.API_KEY_REQUIRED;

packages/contentstack-bulk-operations/test/unit/base-bulk-command.test.ts

@@ -590,6 +590,7 @@ describe('BaseBulkCommand', () => {
       (command as any).bulkOperationConfig = {
         publishMode: 'bulk',
         apiKey: undefined,
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         stackApiKey: 'fallback-key',
         branch: 'main',
         bulkOperationFolder: './bulk-operation',

packages/contentstack-bulk-operations/test/unit/messages/index.test.ts

@@ -110,7 +110,7 @@ describe('Messages', () => {
 
     it('should export flag descriptions', () => {
       expect(messages.ALIAS).to.be.a('string');
-      expect(messages.STACK_API_KEY).to.be.a('string');
+      expect(messages.STACK_API_KEY_placeholder).to.be.a('string');
       expect(messages.OPERATION).to.be.a('string');
     });
 

packages/contentstack-bulk-operations/test/unit/utils/bulk-operation-log-handler.test.ts

@@ -197,6 +197,7 @@ describe('Bulk Operation Log Handler', () => {
           locales: ['en-us'],
           items: [{ uid: 'entry1' }],
           status: 'success',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -254,6 +255,7 @@ describe('Bulk Operation Log Handler', () => {
           items: [{ uid: 'entry1' }],
           status: 'failed',
           error: 'Network error',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -351,6 +353,7 @@ describe('Bulk Operation Log Handler', () => {
           item: { uid: 'entry1', type: 'entry', locale: 'en-us' },
           environments: ['prod'],
           status: 'success',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -400,6 +403,7 @@ describe('Bulk Operation Log Handler', () => {
           environments: ['prod'],
           status: 'failed',
           error: 'Network error',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -442,6 +446,7 @@ describe('Bulk Operation Log Handler', () => {
         locales: ['en-us'],
         items: [{ uid: 'entry1', type: 'entry', locale: 'en-us' }],
         status: 'success',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'test-key',
         branch: 'main',
       };
@@ -467,6 +472,7 @@ describe('Bulk Operation Log Handler', () => {
         locales: ['en-us'],
         items: [],
         status: 'success',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'test-key',
         branch: 'main',
       };
@@ -492,6 +498,7 @@ describe('Bulk Operation Log Handler', () => {
         locales: [],
         items: [],
         status: 'success',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'test-key',
         branch: 'main',
       };
@@ -528,6 +535,7 @@ describe('Bulk Operation Log Handler', () => {
         items: [],
         status: 'failed',
         error: 'API Error',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'test-key',
         branch: 'main',
       };
@@ -563,6 +571,7 @@ describe('Bulk Operation Log Handler', () => {
         item: { uid: 'entry1', type: 'entry', locale: 'en-us' },
         environments: ['prod'],
         status: 'success',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'test-key',
         branch: 'main',
       };
@@ -586,6 +595,7 @@ describe('Bulk Operation Log Handler', () => {
         item: { uid: 'new-entry', type: 'entry', locale: 'en-us' },
         environments: ['prod'],
         status: 'success',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'test-key',
         branch: 'main',
       };
@@ -622,6 +632,7 @@ describe('Bulk Operation Log Handler', () => {
         environments: ['prod'],
         status: 'failed',
         error: 'Publish failed',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'test-key',
         branch: 'main',
       };
@@ -644,6 +655,7 @@ describe('Bulk Operation Log Handler', () => {
         item: { uid: 'entry1', type: 'entry', locale: 'en-us' },
         environments: [],
         status: 'failed',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'test-key',
         branch: 'main',
       };

packages/contentstack-bulk-operations/test/unit/utils/config-builder.test.ts

@@ -567,6 +567,7 @@ describe('Config Builder Utilities', () => {
       };
 
       configHandlerGetStub.withArgs('tokens.test-alias').returns({
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'stack-from-alias',
         token: 'cs-token-123',
       });
@@ -589,6 +590,7 @@ describe('Config Builder Utilities', () => {
       };
 
       configHandlerGetStub.withArgs('tokens.test-alias').returns({
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'stack-mgmt',
         token: 'cs-mgmt-token',
         type: 'management',
@@ -598,6 +600,7 @@ describe('Config Builder Utilities', () => {
         type: 'delivery',
         token: 'cs-delivery-token',
         environment: 'production',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'stack123',
       });
 
@@ -619,6 +622,7 @@ describe('Config Builder Utilities', () => {
       };
 
       configHandlerGetStub.withArgs('tokens.test-alias').returns({
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'stack-mgmt',
         token: 'cs-mgmt-token',
         type: 'management',
@@ -640,6 +644,7 @@ describe('Config Builder Utilities', () => {
       };
 
       configHandlerGetStub.withArgs('tokens.test-alias').returns({
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'stack-mgmt',
         token: 'cs-mgmt-token',
         type: 'management',
@@ -648,6 +653,7 @@ describe('Config Builder Utilities', () => {
       configHandlerGetStub.withArgs('tokens.mgmt-alias').returns({
         type: 'management',
         token: 'cs-mgmt-token',
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'stack123',
       });
 
@@ -665,6 +671,7 @@ describe('Config Builder Utilities', () => {
       };
 
       configHandlerGetStub.withArgs('tokens.test-alias').returns({
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'stack-mgmt',
         token: 'cs-mgmt-token',
         type: 'management',
@@ -674,6 +681,7 @@ describe('Config Builder Utilities', () => {
         type: 'delivery',
         token: 'cs-delivery-token',
         environment: 'production', // Different from source-env
+        // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
         apiKey: 'stack123',
       });
 

packages/contentstack-bulk-operations/test/unit/utils/revert-retry-handler.test.ts

@@ -60,6 +60,7 @@ describe('Revert Retry Handler', () => {
           items: [{ uid: 'entry1', locale: 'en-us', contentType: 'blog', version: 1, type: 'entry' }],
           status: 'failed',
           error: 'Network timeout',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -86,6 +87,7 @@ describe('Revert Retry Handler', () => {
           locales: ['en-us'],
           items: [{ uid: 'asset1', locale: 'en-us', version: 1, type: 'asset' }],
           status: 'failed',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -121,6 +123,7 @@ describe('Revert Retry Handler', () => {
           locales: ['en-us'],
           items: [{ uid: 'entry1', locale: 'en-us', contentType: 'blog', version: 1, type: 'entry' }],
           status: 'success',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -161,6 +164,7 @@ describe('Revert Retry Handler', () => {
           locales: ['en-us'],
           items: [{ uid: 'entry1', locale: 'en-us', contentType: 'blog', version: 1, type: 'entry' }],
           status: 'failed',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -201,6 +205,7 @@ describe('Revert Retry Handler', () => {
           locales: ['en-us'],
           items: [{ uid: 'entry1', locale: 'en-us', contentType: 'blog', version: 1, type: 'entry' }],
           status: 'success',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -260,6 +265,7 @@ describe('Revert Retry Handler', () => {
           locales: ['en-us'],
           items: [{ uid: 'entry1', locale: 'en-us', contentType: 'blog', version: 1, type: 'entry' }],
           status: 'failed',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -295,6 +301,7 @@ describe('Revert Retry Handler', () => {
           locales: ['en-us'],
           items: [{ uid: 'asset1', locale: 'en-us', version: 1, type: 'asset' }],
           status: 'failed',
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -337,6 +344,7 @@ describe('Revert Retry Handler', () => {
           locales: ['en-us'],
           items: [{ uid: 'entry1', locale: 'en-us', contentType: 'blog', version: 1, type: 'entry' as const }],
           status: 'success' as const,
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -360,6 +368,7 @@ describe('Revert Retry Handler', () => {
           locales: ['en-us'],
           items: [{ uid: 'entry1', locale: 'en-us', contentType: 'blog', version: 1, type: 'entry' as const }],
           status: 'success' as const,
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -380,6 +389,7 @@ describe('Revert Retry Handler', () => {
           item: { uid: 'entry1', locale: 'en-us', contentType: 'blog', version: 1, type: 'entry' as const },
           environments: ['prod'],
           status: 'success' as const,
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },
@@ -400,6 +410,7 @@ describe('Revert Retry Handler', () => {
           item: { uid: 'entry1', locale: 'en-us', contentType: 'blog', version: 1, type: 'entry' as const },
           environments: ['prod'],
           status: 'success' as const,
+          // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
           apiKey: 'test-key',
           branch: 'main',
         },