@rahul05ranjan/dhruv-cli 1.4.6 → 1.5.0

package/.github/workflows/ci.yml

@@ -1,119 +1,42 @@
-name: Dhruv CLI CI/CD
+name: Dhruv CLI CI
 
 on:
   push:
-    branches: [ main, develop ]
+    branches: [main]
   pull_request:
-    branches: [ main, develop ]
-  schedule:
-    - cron: '0 2 * * 1' # Weekly security scans
-
-env:
-  NODE_VERSION: '22.14.0'
-  NODE_VERSION_MATRIX: '[18.x, 20.x, 21.x]'
+    branches: [main]
 
 permissions:
-  contents: write
-  security-events: write
-  actions: read
-  pull-requests: write
-  id-token: write
-  checks: write
+  contents: read
 
 jobs:
-  security:
-    name: Security Scan
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v2
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0 # Full history for better security scanning
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit
-
-      - name: Run security audit
-        run: npm audit --audit-level=moderate
-        continue-on-error: true
-
-      - name: Run Semgrep Security Scan
-        uses: semgrep/semgrep-action@v1
-        with:
-          config: auto
-        env:
-          SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
-        continue-on-error: true
-
-      - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@master
-        with:
-          scan-type: 'fs'
-          scan-ref: '.'
-          format: 'sarif'
-          output: 'trivy-results.sarif'
-          severity: 'CRITICAL,HIGH,MEDIUM'
-
-      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
-        if: always()
-        with:
-          sarif_file: 'trivy-results.sarif'
-
-      - name: Run CodeQL Analysis
-        uses: github/codeql-action/init@v3
-        with:
-          languages: javascript
-          queries: security-and-quality
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
-        with:
-          category: "/language:javascript"
-
   test:
-    name: Test Suite
-    runs-on: ubuntu-latest
+    name: Test (${{ matrix.os }}, Node ${{ matrix.node-version }})
+    runs-on: ${{ matrix.os }}
     timeout-minutes: 20
     strategy:
       fail-fast: false
       matrix:
-        node-version: [18.x, 20.x, 21.x]
-        os: [ubuntu-latest, windows-latest, macos-latest]
         include:
-          - node-version: 20.x
-            coverage: true
-        exclude:
-          - os: windows-latest
+          - os: ubuntu-latest
             node-version: 18.x
+          - os: ubuntu-latest
+            node-version: 20.x
+          - os: ubuntu-latest
+            node-version: 22.x
+            coverage: true
           - os: macos-latest
-            node-version: 18.x
+            node-version: 22.x
+          - os: windows-latest
+            node-version: 22.x
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v2
-        with:
-          egress-policy: audit
-
       - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
 
       - name: Set up Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
-          cache: 'npm'
+          cache: npm
 
       - name: Install dependencies
         run: npm ci --prefer-offline --no-audit
@@ -132,12 +55,8 @@ jobs:
         env:
           CI: true
 
-      - name: Generate coverage report
-        if: matrix.coverage
-        run: npm run test:coverage
-
-      - name: Upload coverage to Codecov
-        if: matrix.coverage
+      - name: Upload coverage
+        if: matrix.coverage == true
         uses: codecov/codecov-action@v4
         with:
           file: ./coverage/lcov.info
@@ -145,142 +64,3 @@ jobs:
           name: codecov-${{ matrix.node-version }}
           fail_ci_if_error: false
           token: ${{ secrets.CODECOV_TOKEN }}
-
-      - name: Upload test results
-        uses: dorny/test-reporter@v1
-        if: always()
-        continue-on-error: true
-        with:
-          name: Test Results (${{ matrix.node-version }})
-          path: coverage/junit.xml
-          reporter: jest-junit
-          fail-on-error: false
-
-  performance:
-    name: Performance Testing
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    if: github.event_name == 'push' || github.event.pull_request.draft == false
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v2
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@v4
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit
-
-      - name: Build project
-        run: npm run build
-
-      - name: Run Lighthouse CI
-        run: |
-          npm install -g @lhci/cli
-          lhci autorun --config=lighthouserc.json || echo "Lighthouse CI completed with warnings"
-        continue-on-error: true
-
-      - name: Performance benchmark
-        run: |
-          npm install -g autocannon
-          npm run benchmark || echo "Benchmark completed"
-        continue-on-error: true
-
-      - name: Bundle size analysis
-        run: |
-          npm install -g bundlesize
-          bundlesize || echo "Bundle size check completed"
-        continue-on-error: true
-
-  build:
-    name: Build & Publish
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    needs: [security, test, performance]
-    if: always() && (needs.security.result == 'success' && needs.test.result == 'success')
-    environment:
-      name: ${{ github.ref == 'refs/heads/main' && 'production' || 'development' }}
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v2
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-          registry-url: 'https://registry.npmjs.org'
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit
-
-      - name: Lint
-        run: npm run lint
-
-      - name: Build
-        run: npm run build
-
-      - name: Generate API documentation
-        run: npm run docs
-
-      - name: Run security checks on build
-        run: |
-          npx audit-ci --config audit-ci.json || echo "Security check completed with warnings"
-        continue-on-error: true
-
-      - name: Upload build artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: build-artifacts
-          path: |
-            dist/
-            docs/
-          retention-days: 30
-
-      - name: Upload docs to GitHub Pages
-        if: github.ref == 'refs/heads/main' && github.event_name == 'push'
-        uses: peaceiris/actions-gh-pages@v4
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          publish_dir: ./docs
-          publish_branch: gh-pages
-          enable_jekyll: false
-
-      - name: Publish package (Dry Run)
-        if: github.event_name == 'pull_request'
-        run: npm publish --dry-run
-
-      - name: Create GitHub Release
-        if: startsWith(github.ref, 'refs/tags/v')
-        uses: softprops/action-gh-release@v2
-        with:
-          files: |
-            dist/**
-            docs/**
-          generate_release_notes: true
-          draft: false
-          prerelease: ${{ contains(github.ref, 'alpha') || contains(github.ref, 'beta') || contains(github.ref, 'rc') }}
-
-      - name: Notify deployment status
-        if: always() && github.ref == 'refs/heads/main'
-        uses: 8398a7/action-slack@v3
-        continue-on-error: true
-        with:
-          status: ${{ job.status }}
-          channel: '#deployments'
-        env:
-          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK }}

package/.github/workflows/contribution.yml

@@ -1,30 +1,21 @@
-name: Pull Request Validation
+name: Pull Request Policy
 
 on:
   pull_request:
+    branches: [main]
     types: [opened, synchronize, reopened, ready_for_review]
 
 permissions:
   contents: read
   pull-requests: write
-  checks: write
 
 jobs:
   validate-pr:
-    name: PR Validation
+    name: PR Metadata
     runs-on: ubuntu-latest
     timeout-minutes: 10
     if: github.event.pull_request.draft == false
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v2
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
       - name: Validate PR title
         uses: amannn/action-semantic-pull-request@v5
         with:
@@ -43,7 +34,7 @@ jobs:
           requireScope: false
           disallowScopes: |
             release
-          subjectPattern: ^(?![A-Z]).+$
+          subjectPattern: ^(?![A-Z]).+
           subjectPatternError: |
             The subject "{subject}" found in the pull request title "{title}"
             didn't match the configured pattern. Please ensure that the subject
@@ -51,7 +42,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Check PR size
+      - name: Apply PR size label
         uses: pascalgn/size-label-action@v0.5.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -59,135 +50,9 @@ jobs:
           sizes: >
             {
               "0": "XS",
-              "20": "S", 
+              "20": "S",
               "50": "M",
               "200": "L",
               "800": "XL",
               "2000": "XXL"
             }
-
-  lint-and-test:
-    name: Quality Checks
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    if: github.event.pull_request.draft == false
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v2
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20.8.1'
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit
-
-      - name: Run linter
-        run: npm run lint
-
-      - name: Type checking
-        run: npm run type-check
-
-      - name: Run tests
-        run: npm run test:ci
-        env:
-          CI: true
-
-      - name: Build project
-        run: npm run build
-
-      - name: Check for breaking changes
-        run: |
-          npm run build
-          git diff --exit-code dist/ || (echo "Build artifacts changed, please commit the changes" && exit 1)
-        continue-on-error: true
-
-  security-check:
-    name: Security Validation
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    if: github.event.pull_request.draft == false
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v2
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20.8.1'
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit
-
-      - name: Run security audit
-        run: npm audit --audit-level=moderate
-        continue-on-error: true
-
-      - name: Scan for secrets
-        uses: trufflesecurity/trufflehog@main
-        with:
-          path: ./
-          base: ${{ github.event.repository.default_branch }}
-          head: HEAD
-          extra_args: --debug --only-verified
-        continue-on-error: true
-
-  documentation:
-    name: Documentation Check
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    if: github.event.pull_request.draft == false
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v2
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@v4
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20.8.1'
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci --prefer-offline --no-audit
-
-      - name: Generate documentation
-        run: npm run docs
-
-      - name: Check for documentation changes
-        run: |
-          if git diff --quiet HEAD^ HEAD -- '*.md' 'docs/' ; then
-            echo "No documentation changes detected"
-          else
-            echo "Documentation changes detected"
-          fi
-
-  auto-assign:
-    name: Auto Assignment
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    if: github.event.action == 'opened'
-    steps:
-      - name: Auto assign PR
-        uses: kentaro-m/auto-assign-action@v1.2.6
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          configuration-path: .github/auto_assign.yml

package/.github/workflows/dependabot-auto-merge.yml

@@ -2,6 +2,7 @@ name: Dependabot Auto Merge
 
 on:
   pull_request:
+    branches: [main]
     types:
       - opened
       - synchronize

package/.github/workflows/labeler.yml

@@ -2,6 +2,7 @@ name: Pull Request Labeler
 
 on:
   pull_request:
+    branches: [main]
     types: [opened, synchronize, reopened]
 
 jobs:

package/.github/workflows/security.yml

@@ -38,6 +38,7 @@ jobs:
   license-check:
     name: License Compliance
     runs-on: ubuntu-latest
+    if: github.event_name != 'pull_request'
     timeout-minutes: 10
     steps:
       - name: Harden Runner
@@ -64,6 +65,7 @@ jobs:
   supply-chain:
     name: Supply Chain Security
     runs-on: ubuntu-latest
+    if: github.event_name != 'pull_request'
     timeout-minutes: 15
     steps:
       - name: Harden Runner
@@ -101,6 +103,7 @@ jobs:
   sbom-generation:
     name: Generate SBOM
     runs-on: ubuntu-latest
+    if: github.event_name != 'pull_request'
     timeout-minutes: 10
     steps:
       - name: Harden Runner

package/CHANGELOG.md

@@ -1,11 +1,16 @@
-# [1.4.0](https://github.com/rahul05ranjan/dhruv-cli/compare/v1.4.5...v1.4.0) (2026-09-18)
+# [1.4.0](https://github.com/rahul05ranjan/dhruv-cli/compare/v1.4.6...v1.4.0) (2026-09-18)
 
 
 ### Bug Fixes
 
-* **ci:** isolate Scorecard publishing from other security scans ([087833b](https://github.com/rahul05ranjan/dhruv-cli/commit/087833b470c2df96da54eb1f07fc5ef488106f61))
-* **ci:** repair trusted publishing and security workflows ([7f6d202](https://github.com/rahul05ranjan/dhruv-cli/commit/7f6d2028ffde96a446d6f346d0936c56fb830e61))
-* **ci:** update Anchore scanner for the current vulnerability database ([7009198](https://github.com/rahul05ranjan/dhruv-cli/commit/70091989b636878f61c741eb2b5abf21fb5df922))
+* change moduleResolution from Node to Bundler in tsconfig ([b8339bb](https://github.com/rahul05ranjan/dhruv-cli/commit/b8339bb89781490d5678f43052b606138f375d21))
+* drop unused menu loop flag ([51eeec6](https://github.com/rahul05ranjan/dhruv-cli/commit/51eeec6a607299120ce3e1f15af9f9dc62396ce7))
+* stabilize health and CLI contract tests on CI ([3b3e650](https://github.com/rahul05ranjan/dhruv-cli/commit/3b3e6503591c8c33d36f1887e94358dafe6163ce))
+
+
+### Features
+
+* improve cli experience across commands ([ce41913](https://github.com/rahul05ranjan/dhruv-cli/commit/ce4191350ca3d1c5f49b371508e66de9421f6d20))
 # Changelog
 
 ## [1.1.1](https://github.com/rahul05ranjan/dhruv-cli/compare/v1.1.0...v1.1.1) (2025-06-29)