Next Release: changelog and version packages

.changeset/RELEASE

@@ -1 +1 @@
-Wed Oct 21 20:07:35 UTC 2026
+Fri Oct 23 21:41:22 UTC 2026

.claude-plugin/marketplace.json

@@ -18,7 +18,7 @@
       "source": "./skills/b2c-cli",
       "category": "productivity",
       "strict": false,
-      "version": "1.12.4"
+      "version": "1.12.5"
     },
     {
       "name": "b2c",
@@ -31,7 +31,7 @@
       "source": "./skills/b2c",
       "category": "productivity",
       "strict": false,
-      "version": "1.12.4"
+      "version": "1.12.5"
     },
     {
       "name": "b2c-ops",
@@ -44,7 +44,7 @@
       "source": "./skills/b2c-ops",
       "category": "productivity",
       "strict": false,
-      "version": "1.12.4"
+      "version": "1.12.5"
     },
     {
       "name": "b2c-dx-mcp",
@@ -57,7 +57,7 @@
       "source": "./plugins/b2c-dx-mcp",
       "category": "productivity",
       "strict": false,
-      "version": "3.6.2"
+      "version": "3.6.3"
     },
     {
       "name": "storefront-next",
@@ -70,7 +70,7 @@
       "source": "./skills/storefront-next",
       "category": "productivity",
       "strict": false,
-      "version": "1.12.4"
+      "version": "1.12.5"
     },
     {
       "name": "storefront-next-figma",

action.yml

@@ -92,7 +92,7 @@ runs:
   steps:
     - name: Setup B2C CLI
       id: setup
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.4
       with:
         version: ${{ inputs.version }}
         node-version: ${{ inputs.node-version }}
@@ -117,7 +117,7 @@ runs:
     - name: Run command
       id: command
       if: inputs.command != ''
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.4
       with:
         command: ${{ inputs.command }}
         json: ${{ inputs.json }}

actions/VERSION

@@ -1 +1 @@
-2.8.3
+2.8.4

actions/code-deploy/action.yml

@@ -92,7 +92,7 @@ runs:
   using: 'composite'
   steps:
     - name: Ensure CLI is installed
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.4
       with:
         version: ${{ inputs.version }}
         node-version: ${{ inputs.node-version }}
@@ -153,7 +153,7 @@ runs:
 
     - name: Deploy cartridges
       id: deploy
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.4
       with:
         command: ${{ steps.build-cmd.outputs.cmd }}
         json: 'true'

actions/data-import/action.yml

@@ -81,7 +81,7 @@ runs:
   using: 'composite'
   steps:
     - name: Ensure CLI is installed
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.4
       with:
         version: ${{ inputs.version }}
         node-version: ${{ inputs.node-version }}
@@ -123,7 +123,7 @@ runs:
 
     - name: Import data
       id: import
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.4
       with:
         command: ${{ steps.build-cmd.outputs.cmd }}
         json: 'true'

actions/job-run/action.yml

@@ -76,7 +76,7 @@ runs:
   using: 'composite'
   steps:
     - name: Ensure CLI is installed
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.4
       with:
         version: ${{ inputs.version }}
         node-version: ${{ inputs.node-version }}
@@ -121,7 +121,7 @@ runs:
 
     - name: Run job
       id: job
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.4
       with:
         command: ${{ steps.build-cmd.outputs.cmd }}
         json: 'true'

actions/mrt-deploy/action.yml

@@ -47,7 +47,7 @@ runs:
   using: 'composite'
   steps:
     - name: Ensure CLI is installed
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.4
       with:
         version: ${{ inputs.version }}
         node-version: ${{ inputs.node-version }}
@@ -87,7 +87,7 @@ runs:
 
     - name: Deploy MRT bundle
       id: deploy
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.4
       with:
         command: ${{ steps.build-cmd.outputs.cmd }}
         json: 'true'

actions/webdav-upload/action.yml

@@ -77,7 +77,7 @@ runs:
   using: 'composite'
   steps:
     - name: Ensure CLI is installed
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/setup@v2.8.4
       with:
         version: ${{ inputs.version }}
         node-version: ${{ inputs.node-version }}
@@ -99,7 +99,7 @@ runs:
 
     - name: Upload via WebDAV
       id: upload
-      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.3
+      uses: SalesforceCommerceCloud/b2c-developer-tooling/actions/run@v2.8.4
       with:
         command: 'webdav put ${{ inputs.local-path }} ${{ inputs.remote-path }} --root ${{ inputs.root }}'
         json: 'true'

docs/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @salesforce/b2c-dx-docs
 
+## 0.4.10
+
+### Patch Changes
+
+- [#807](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/pull/807) [`b02559a`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b02559a16b90e6a6049d01ca04b9696577c3ec6d) - `b2c cap validate` now requires `app-configuration/translations/` when a CAP includes `tasksList.json`. Add the required Business Manager locales, and make sure `en-US.json` covers every config task key. Install runs this check unless you pass `--skip-validate`. (Thanks [@shauryemahajanSF](https://github.com/shauryemahajanSF)!)
+
 ## 0.4.9
 
 ### Patch Changes

docs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/b2c-dx-docs",
-  "version": "0.4.9",
+  "version": "0.4.10",
   "private": true,
   "type": "module",
   "description": "Documentation for B2C Developer Tooling",

packages/b2c-cli/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @salesforce/b2c-cli
 
+## 2.8.4
+
+### Patch Changes
+
+- Updated dependencies [[`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d), [`b02559a`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b02559a16b90e6a6049d01ca04b9696577c3ec6d), [`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d)]:
+  - @salesforce/b2c-tooling-sdk@2.8.3
+
 ## 2.8.3
 
 ### Patch Changes

packages/b2c-cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@salesforce/b2c-cli",
   "description": "A Salesforce B2C Commerce CLI",
-  "version": "2.8.3",
+  "version": "2.8.4",
   "author": "Charles Lavery",
   "bin": {
     "b2c": "./bin/run.js"

packages/b2c-dx-mcp/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @salesforce/b2c-dx-mcp
 
+## 3.6.3
+
+### Patch Changes
+
+- [#814](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/pull/814) [`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d) - Updated zod to 4.6.7 to fix excessive memory use when validating oversized tool inputs, and refreshed bundled dependencies with security fixes. (Thanks [@clavery](https://github.com/clavery)!)
+
+- Updated dependencies [[`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d), [`b02559a`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b02559a16b90e6a6049d01ca04b9696577c3ec6d), [`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d)]:
+  - @salesforce/b2c-tooling-sdk@2.8.3
+  - @salesforce/b2c-agent-plugins@1.12.5
+
 ## 3.6.2
 
 ### Patch Changes

packages/b2c-dx-mcp/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@salesforce/b2c-dx-mcp",
   "description": "MCP server for B2C Commerce developer experience tools",
-  "version": "3.6.2",
+  "version": "3.6.3",
   "author": "Salesforce",
   "license": "Apache-2.0",
   "homepage": "https://salesforcecommercecloud.github.io/b2c-developer-tooling/mcp/",

packages/b2c-tooling-sdk/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @salesforce/b2c-tooling-sdk
 
+## 2.8.3
+
+### Patch Changes
+
+- [#814](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/pull/814) [`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d) - Debug logs no longer include the first characters of an API key (or the whole key when it is short). (Thanks [@clavery](https://github.com/clavery)!)
+
+- [#807](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/pull/807) [`b02559a`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b02559a16b90e6a6049d01ca04b9696577c3ec6d) - `b2c cap validate` now requires `app-configuration/translations/` when a CAP includes `tasksList.json`. Add the required Business Manager locales, and make sure `en-US.json` covers every config task key. Install runs this check unless you pass `--skip-validate`. (Thanks [@shauryemahajanSF](https://github.com/shauryemahajanSF)!)
+
+- [#814](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/pull/814) [`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d) - Hardened skill, scaffold, and API filter parsing against crafted input that could stall processing or modify object prototypes. (Thanks [@clavery](https://github.com/clavery)!)
+
 ## 2.8.2
 
 ### Patch Changes

packages/b2c-tooling-sdk/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@salesforce/b2c-tooling-sdk",
   "description": "Core tooling library for Salesforce B2C Commerce CLI",
-  "version": "2.8.2",
+  "version": "2.8.3",
   "author": "Charles Lavery",
   "license": "Apache-2.0",
   "repository": "SalesforceCommerceCloud/b2c-developer-tooling",

packages/b2c-vs-extension/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Change Log
 
+## 1.5.9
+
+### Patch Changes
+
+- [#814](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/pull/814) [`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d) - The API Browser now only proxies requests to Commerce Cloud API hosts over HTTPS. (Thanks [@clavery](https://github.com/clavery)!)
+
+- Updated dependencies [[`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d), [`b02559a`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b02559a16b90e6a6049d01ca04b9696577c3ec6d), [`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d)]:
+  - @salesforce/b2c-tooling-sdk@2.8.3
+
 ## 1.5.8
 
 ### Patch Changes

packages/b2c-vs-extension/package.json

@@ -2,7 +2,7 @@
   "name": "b2c-vs-extension",
   "displayName": "Salesforce B2C Commerce",
   "description": "Tools for developing on Salesforce B2C Commerce, including cartridge deployment, script debugging and IntelliSense, and sandbox management.",
-  "version": "1.5.8",
+  "version": "1.5.9",
   "publisher": "Salesforce",
   "icon": "media/icon.png",
   "license": "Apache-2.0",

packages/mrt-reference-app/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @salesforce/mrt-reference-app
 
+## 0.0.5
+
+### Patch Changes
+
+- Updated dependencies [[`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d)]:
+  - @salesforce/mrt-utilities@0.3.3
+
 ## 0.0.4
 
 ### Patch Changes

packages/mrt-reference-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/mrt-reference-app",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Reference application demonstrating MRT features",
   "type": "module",
   "author": "Salesforce",

packages/mrt-utilities/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @salesforce/mrt-utilities
 
+## 0.3.3
+
+### Patch Changes
+
+- [#814](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/pull/814) [`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d) - Updated http-proxy-middleware to 3.0.7 to pick up security fixes. (Thanks [@clavery](https://github.com/clavery)!)
+
 ## 0.3.2
 
 ### Patch Changes

packages/mrt-utilities/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/mrt-utilities",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Middleware and utilities to simulate a deployed Managed Runtime environment",
   "type": "module",
   "author": "Salesforce",

packages/mrt-welcome-app/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @salesforce/mrt-welcome-app
 
+## 0.0.5
+
+### Patch Changes
+
+- Updated dependencies [[`b56cfbe`](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/commit/b56cfbe55d2b3b5c421318037b7822ff4708123d)]:
+  - @salesforce/mrt-utilities@0.3.3
+
 ## 0.0.4
 
 ### Patch Changes

packages/mrt-welcome-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/mrt-welcome-app",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Welcome application deployed to new MRT environments",
   "type": "module",
   "author": "Salesforce",

plugins/b2c-dx-mcp/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "b2c-dx-mcp",
-  "version": "3.6.2",
+  "version": "3.6.3",
   "description": "Build, debug, and deploy Salesforce B2C Commerce with your AI assistant. Includes documentation, workflow skills, and Salesforce Commerce API tools.",
   "author": {
     "name": "Salesforce"

plugins/b2c-dx-mcp/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "b2c-dx-mcp",
-  "version": "3.6.2",
+  "version": "3.6.3",
   "description": "Build, debug, and deploy Salesforce B2C Commerce with your AI assistant. Includes documentation, workflow skills, and Salesforce Commerce API tools.",
   "author": {
     "name": "Salesforce",