[SakshiKoli-CS]

What

Upgrades Launch CLI V2 to the csdx 2.x libraries, so it runs on @contentstack/cli 2.x, the current npm latest.

On csdx 2.x every launch:* command crashed at startup with error: inquirer.registerPrompt is not a function. csdx 2.x's bin/run.js makes plugins resolve @contentstack/cli-utilities to csdx's own 2.x copy (inquirer 12), whatever the plugin pins. The new Launch-cli-v2-dev11-integration-sanity GoCD pipeline found it on its first run. This replaces the inquirer 8/12 compatibility shim in #278 (closed).

Dependencies

• @contentstack/cli-utilities ^1.18.5 → ^2.0.2
• @contentstack/cli-command ^1.8.7 → ^2.0.2, which now shares that cli-utilities instead of a nested 1.x copy
• Every new lockfile entry resolves from registry.npmjs.org.

Prompts (src/core/search-list.ts)

• The custom search-list is registered on inquirer 12's registry (inquirer.default, via promptLibrary()).
• The list/checkbox paging subclass is removed. inquirer 12 has no lib/prompts to extend, and it pages list and checkbox itself from the pageSize and loop: false options askOption/askChoices already pass. The scroll window may look slightly different from the old custom scroller.

Exit codes (src/core/failure.ts, src/secrets/secret.rules.ts)

• Found by running the e2e suite on csdx 2.x. cli-command 2's Command extends cli-utilities' Command, so on csdx 2.x its errors come from csdx's @oclif/core, and instanceof against Launch CLI's copy failed. A declined confirm exited 1 with error: EEXIT: 3 instead of exit 3.
• isOclifError() now matches oclif errors by shape. reportFailure() and the secrets:set argv redaction (asSafeArgvFailure) use it.

Tests

• npm test: 193 suites, 3819 tests pass. npm run lint and tsc are clean.
• Directly after the bump, 467 tests failed: about 406 were the startup crash and 10 read inquirer 8 internals. The commits fix both.
• New tests cover oclif errors raised by another copy of oclif (exit request, exit code, argv-parse redaction) and inquirer 12's registry shape.
• End to end on real csdx 2.0.1 against dev11, with this build linked, using the CL-7176 V2 e2e suite:
  • Full suite: 19 of 21 passed. One failure was the exit-3 bug above (fixed in the second commit). The other was a deployments:list timeout while dev11's API was slow.
  • Rerun of those two specs on the final build: 9 of 9 passed. That includes the rollback (y/N) prompt answered n exiting 3, and the custom search picker.
  • Every test project was cleaned up.

Note

Launch CLI V2 now targets csdx 2.x. It hasn't been run on csdx 1.x after this change. V2 is unreleased (npm latest for @contentstack/cli-launch is 1.11.4).

Jira: https://contentstack.atlassian.net/browse/CL-8328

#claude_code#
🤖 Generated with Claude Code

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[github-actions]

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	6	9	25	✅ Passed
🟡 Medium Severity	5	7	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	Breaches (with fixes)	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	0	15 / 30 days	✅ Passed
🟠 High	0	0	30 / 120 days	✅ Passed
🟡 Medium	0	0	90 / 365 days	✅ Passed
🔵 Low	0	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

• Critical without fixes: 0
• High without fixes: 9
• Medium without fixes: 7
• Low without fixes: 0

✅ BUILD PASSED - All security checks passed