chore: release 2.0.0 (#498)

Author: KLongmuirHD

.github/workflows/demo-build-and-scan-docker-image.yml

@@ -57,7 +57,7 @@ jobs:
           path: .
 
       - name: Run EOL scan
-        run: npx @herodevs/cli@beta scan eol --file=sbom.json --save
+        run: npx @herodevs/cli scan eol --file=sbom.json --save
 
       - name: Upload HD report
         uses: actions/upload-artifact@v6

.github/workflows/demo-scan-docker-image.yml

@@ -53,7 +53,7 @@ jobs:
           path: .
 
       - name: Run EOL scan
-        run: npx @herodevs/cli@beta scan eol --file=sbom.json --save
+        run: npx @herodevs/cli scan eol --file=sbom.json --save
 
       - name: Upload HD report
         uses: actions/upload-artifact@v6

.github/workflows/demo-scan.yaml

@@ -19,7 +19,7 @@ jobs:
           node-version-file: '.nvmrc'
 
       - name: Run EOL Scan
-        run: npx @herodevs/cli@beta scan eol --save
+        run: npx @herodevs/cli scan eol --save
 
       - name: Upload artifact
         uses: actions/upload-artifact@v6

README.md

@@ -29,13 +29,13 @@ The HeroDevs CLI
 With Node installed, you can run the CLI directly from the npm registry without installing it globally or locally on your system
 
 ```sh
-npx @herodevs/cli@beta
+npx @herodevs/cli
 ```
 
 #### Global NPM Installation
 
 ```sh
-npm install -g @herodevs/cli@beta
+npm install -g @herodevs/cli
 ```
 
 #### Binary Installation
@@ -68,11 +68,11 @@ Maven and Gradle projects should run an install and build before scanning
 ## Usage
 <!-- usage -->
 ```sh-session
-$ npm install -g @herodevs/cli@beta
+$ npm install -g @herodevs/cli
 $ hd COMMAND
 running command...
 $ hd (--version)
-@herodevs/cli/2.0.0-beta.16 darwin-arm64 node-v24.10.0
+@herodevs/cli/2.0.0 darwin-arm64 node-v24.10.0
 $ hd --help [COMMAND]
 USAGE
   $ hd COMMAND
@@ -357,28 +357,19 @@ hd auth login
 hd auth provision-ci-token
 ```
 
-Copy the token output, add as CI secret: `HD_CI_CREDENTIAL`
+Copy the token output, add as an environment variable: `HD_CI_CREDENTIAL`
 
-**CI pipeline (headless):** Run `hd scan eol` directly with `HD_CI_CREDENTIAL` set. The CLI exchanges the token for an access token automatically:
+**CI pipeline (headless):** Run `hd scan eol` directly with `HD_CI_CREDENTIAL` set. The CLI exchanges the token for an access token automatically. An explicit `auth login` command is not required when using the CI token.
 
 ```bash
 export HD_CI_CREDENTIAL="<token>"
-hd scan eol --dir .
+hd scan eol
 ```
 
 | Secret / Env Var | Purpose |
 |------------------|---------|
 | `HD_CI_CREDENTIAL` | Refresh token from provision; exchanged for access token |
 
-#### Local testing
-
-Reproduce the CI flow locally:
-
-```bash
-export HD_CI_CREDENTIAL="<token-from-provision>"
-hd scan eol --dir /path/to/project
-```
-
 #### GitHub Actions (authenticated scan)
 
 Add secret `HD_CI_CREDENTIAL` in your repository or organization, then:
@@ -391,7 +382,7 @@ Add secret `HD_CI_CREDENTIAL` in your repository or organization, then:
 - name: Run EOL Scan
   env:
     HD_CI_CREDENTIAL: ${{ secrets.HD_CI_CREDENTIAL }}
-  run: npx @herodevs/cli@beta scan eol -s
+  run: npx @herodevs/cli scan eol -s
 ```
 
 #### GitLab CI (authenticated scan)
@@ -404,7 +395,7 @@ eol-scan:
   variables:
     HD_CI_CREDENTIAL: $HD_CI_CREDENTIAL
   script:
-    - npx @herodevs/cli@beta scan eol -s
+    - npx @herodevs/cli scan eol -s
   artifacts:
     paths:
       - herodevs.report.json
@@ -462,7 +453,7 @@ eol-scan:
     # Entrypoint or base command must be disabled due 
     # to GitLab's execution mechanism and run manually
     entrypoint: [""] 
-  script: "npx @herodevs/cli@beta scan eol -s"
+  script: "npx @herodevs/cli scan eol -s"
   artifacts:
     paths:
       - herodevs.report.json
@@ -502,7 +493,7 @@ jobs:
       - run: echo # Prepare environment, install tooling, perform setup, etc.
 
       - name: Run EOL Scan
-        run: npx @herodevs/cli@beta scan eol
+        run: npx @herodevs/cli scan eol
 
       - name: Upload artifact
         uses: actions/upload-artifact@v5
@@ -519,7 +510,7 @@ image: alpine
 eol-scan:
   script:
     - echo # Prepare environment, install tooling, perform setup, etc.
-    - npx @herodevs/cli@beta scan eol -s
+    - npx @herodevs/cli scan eol -s
   artifacts:
     paths:
       - herodevs.report.json

ci/image.Dockerfile

@@ -3,7 +3,7 @@ ENV NODE_NO_WARNINGS=1 \
     NPM_CONFIG_UPDATE_NOTIFIER=false \
     NPM_CONFIG_LOGLEVEL=error
 WORKDIR /app
-ARG VERSION=beta
+ARG VERSION=2.0.0
 USER root
 RUN npm install -g @herodevs/cli@${VERSION}
 COPY --chmod=755 ci/docker-entrypoint.sh /usr/local/bin/hd-entrypoint

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@herodevs/cli",
-  "version": "2.0.0-beta.18",
+  "version": "2.0.0",
   "author": "HeroDevs, Inc",
   "bin": {
     "hd": "./bin/run.js"

package.json

@@ -32,7 +32,7 @@ INSTALL_DIR="$HOME/.herodevs"
 BIN_DIR="$INSTALL_DIR/bin"
 GITHUB_API_URL="https://api.github.com/repos/${REPO_OWNER}/${REPO_NAME}/releases"
 TMP_DIR=""
-LATEST_VERSION="v2.0.0-beta.18"
+LATEST_VERSION="v2.0.0"
 DEBUG=${DEBUG:-}
 
 # Colors for output

scripts/install.sh

@@ -11,20 +11,28 @@ const __dirname = path.dirname(__filename);
 
 const readmePath = path.join(__dirname, '../README.md');
 const installScriptPath = path.join(__dirname, './install.sh');
+const dockerfilePath = path.join(__dirname, '../ci/image.Dockerfile');
 
 let readme = fs.readFileSync(readmePath, 'utf8');
 let installScript = fs.readFileSync(installScriptPath, 'utf8');
+let dockerfile = fs.readFileSync(dockerfilePath, 'utf8');
 
 // Regex to match version string inside /cli/v{{version}}/scripts/
 const versionInInstallReadme = /(\/cli\/)v\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(\/scripts\/)/g;
 
 // Regex to match the LATEST_VERSION defined in the install.sh script
 const versionInInstallScript = /(LATEST_VERSION=")v\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(")/g;
 
+// Regex to match ARG VERSION=<version> in the Dockerfile
+const versionInDockerfile = /(ARG VERSION=)\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?/g;
+
 readme = readme.replace(versionInInstallReadme, `$1v${newVersion}$2`);
 fs.writeFileSync(readmePath, readme);
 
 installScript = installScript.replace(versionInInstallScript, `$1v${newVersion}$2`);
 fs.writeFileSync(installScriptPath, installScript);
 
+dockerfile = dockerfile.replace(versionInDockerfile, `$1${newVersion}`);
+fs.writeFileSync(dockerfilePath, dockerfile);
+
 console.log(`Updated install script and install command with ${newVersion}`);