Merge branch 'main' into angular/version-update

Author: tarushi-sf

.claude/hooks/block-no-verify.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Claude adapter for the repository-owned safeguard engine.
+ROOT="${CLAUDE_PROJECT_DIR:-${CURSOR_PROJECT_DIR:-$(git rev-parse --show-toplevel)}}"
+exec node "$ROOT/scripts/block-no-verify-cli.js"

.claude/settings.json

@@ -0,0 +1,15 @@
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/block-no-verify.sh"
+          }
+        ]
+      }
+    ]
+  }
+}

.lintstagedrc.js

@@ -0,0 +1,12 @@
+import { createRequire } from 'node:module';
+
+const require = createRequire(import.meta.url);
+const { noVerifyDenial } = require('../../scripts/ai-safeguards.js');
+
+export const GitSafeguards = async () => ({
+  'tool.execute.before': async (input, output) => {
+    if (input.tool !== 'bash' && input.tool !== 'shell') return;
+    const reason = noVerifyDenial(String(output.args.command ?? ''));
+    if (reason) throw new Error(reason);
+  },
+});

.opencode/plugins/git-safeguards.mjs

@@ -1,3 +1,29 @@
+## [66.13.7](https://github.com/forcedotcom/salesforcedx-templates/compare/66.13.6...66.13.7) (2026-08-14)
+
+
+
+## [66.13.6](https://github.com/forcedotcom/salesforcedx-templates/compare/66.13.5...66.13.6) (2026-08-11)
+
+
+
+## [66.13.5](https://github.com/forcedotcom/salesforcedx-templates/compare/66.13.4...66.13.5) (2026-07-31)
+
+
+### Bug Fixes
+
+* validate custom templates for dangerous code execution patterns @W-23595931@ ([#875](https://github.com/forcedotcom/salesforcedx-templates/issues/875)) ([5bb45d1](https://github.com/forcedotcom/salesforcedx-templates/commit/5bb45d19ebdcf1efe2f16db7bdf4825805bd8715))
+
+
+
+## [66.13.4](https://github.com/forcedotcom/salesforcedx-templates/compare/66.13.3...66.13.4) (2026-07-29)
+
+
+### Bug Fixes
+
+* require Node >=22.0.0, drop EOL Node versions @W-23480655@ ([28206eb](https://github.com/forcedotcom/salesforcedx-templates/commit/28206eb0f5396ca73b223b6fddcba901f3b08d4f))
+
+
+
 ## [66.13.3](https://github.com/forcedotcom/salesforcedx-templates/compare/66.13.2...66.13.3) (2026-07-26)
 
 

CHANGELOG.md

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/templates",
-  "version": "66.13.3",
+  "version": "66.13.7",
   "description": "Salesforce JS library for templates",
   "bugs": "https://github.com/forcedotcom/salesforcedx-templates/issues",
   "main": "lib/index.js",
@@ -23,12 +23,12 @@
   },
   "devDependencies": {
     "@salesforce/dev-config": "^4.3.3",
-    "@salesforce/dev-scripts": "^11.0.2",
+    "@salesforce/dev-scripts": "^11.0.4",
     "@salesforce/prettier-config": "^0.0.4",
     "@salesforce/ui-bundle-template-app-angular-template-b2e": "^11.62.0",
     "@salesforce/ui-bundle-template-app-angular-template-b2x": "^11.62.0",
-    "@salesforce/ui-bundle-template-app-react-template-b2e": "^10.24.0",
-    "@salesforce/ui-bundle-template-app-react-template-b2x": "^10.12.2",
+    "@salesforce/ui-bundle-template-app-react-template-b2e": "^11.57.2",
+    "@salesforce/ui-bundle-template-app-react-template-b2x": "^11.57.2",
     "@salesforce/ui-bundle-template-base-angular-app": "^11.62.0",
     "@salesforce/ui-bundle-template-base-react-app": "^10.24.0",
     "@salesforce/ui-bundle-template-base-web-app": "^10.24.0",
@@ -42,7 +42,7 @@
     "chai-as-promised": "^7.1.2",
     "commitizen": "^4.3.2",
     "cz-conventional-changelog": "^3.3.0",
-    "esbuild": "^0.28.1",
+    "esbuild": "^0.28.2",
     "eslint": "^7.27.0",
     "eslint-config-prettier": "^6.11.0",
     "eslint-config-salesforce": "^0.1.6",
@@ -53,7 +53,7 @@
     "eslint-plugin-jsdoc": "^46.10.1",
     "eslint-plugin-prettier": "^3.1.3",
     "husky": "^8.0.3",
-    "mocha": "^11.7.6",
+    "mocha": "^11.8.0",
     "nyc": "^15.1.0",
     "prettier": "^2.0.5",
     "pretty-quick": "^3.3.1",
@@ -65,7 +65,7 @@
     "typescript": "^5.9.3"
   },
   "engines": {
-    "node": ">=18.18.2"
+    "node": ">=22.0.0"
   },
   "scripts": {
     "build": "yarn run clean:lib && yarn compile && yarn build:copy-templates && yarn build:templates",