AIT-308: release CLI 0.14.6 with dependency fixes

[ord669]

What changed

• Release version 0.14.6.
• Update tar, Sentry, Vitest, and tsx.
• Override brace-expansion to 5.0.9 and remove the vulnerable nested pin.
• Regenerate the npm lockfile.

Why

The release audit found dependency advisories in the production CLI package.

Impact

Dependency-only maintenance release. No intended command behavior change.

Validation

• npm ci
• npm run build
• npm test — 131 files, 996 tests passed
• npm pack --dry-run
• npm audit — 0 vulnerabilities

Linear: https://linear.app/hookmyapp/issue/AIT-308/remove-production-e2e-endpoints-and-patch-release-blocking

Summary by CodeRabbit

• Release
  • Updated the CLI to version 0.14.6.
  • Improved reliability and security through updated runtime and tooling components.
  • Refined package resolution to use newer compatible versions.

[coderabbitai]

📝 Walkthrough

Walkthrough

The CLI package version is incremented to 0.14.6. Runtime dependencies, development tooling, and package overrides are updated in package.json.

Changes

CLI package refresh

Layer / File(s)	Summary
Package metadata and dependency updates package.json	The package version, @sentry/node, tar, Vitest tooling, tsx, and brace-expansion overrides are updated; the minimatch@9 override is removed.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• hookmyapp/cli#38: Updates the CLI package release version in the same package manifest.
• hookmyapp/cli#36: Updates the CLI package version in the same release sequence.
• hookmyapp/cli#34: Modifies the CLI package version field in package.json.

Suggested reviewers: ordvir

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: a CLI 0.14.6 release with dependency fixes.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ait-308-remove-prod-e2e-deps

---

_{Comment @coderabbitai help to get the list of available commands.}

[ord669]

@codex review

@coderabbitai review

[ord669]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: de10aa42f8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[coderabbitai]

@ord669 I’ll review the changes in #40.

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Another round soon, please!

Reviewed commit: de10aa42f8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".