chore: version packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@codacy/codacy-cloud-cli@1.6.1

Patch Changes

• #30 12c1a33 Thanks @alerizzo! - Neutralize terminal control characters in human-readable output (CWE-150).
  Repository-derived values shown by the CLI — PR and finding titles, author
  names, branches, file paths, diff and file content, issue messages, and package
  names — are now stripped of ANSI/OSC escape and other control bytes before being
  printed, so a crafted pull request can no longer repaint or hide findings, spoof
  gate status, or trigger terminal side effects (e.g. clipboard writes) when you
  run the CLI against it. Offending bytes are shown in visible caret notation
  (e.g. ^[) instead of being interpreted. --output json is unaffected — it
  still returns the original values, escaped by JSON encoding.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

This PR is presented as a version bump to 1.6.1; however, the CHANGELOG.md and PR intent documentation claim the inclusion of a security fix (CWE-150) for neutralizing terminal control characters which is not present in the code changes. Merging this in its current state would result in a version release that falsely claims to have patched a security vulnerability. Although Codacy identifies no quality issues in the provided file changes, the implementation gap is a major concern that prevents merging.

About this PR

• There is a significant discrepancy between the PR documentation and the implementation. The CHANGELOG.md and PR intent describe a security fix for CWE-150 (neutralizing terminal control characters), but the logic to perform this neutralization is missing from the codebase changes. The version bump should not be merged until the implementation is included or verified as already present in the target branch.

Test suggestions

• Verify that ANSI escape sequences in repository-derived strings are replaced with caret notation in human-readable output.
• Verify that control bytes in human-readable output are neutralized and visible.
• Verify that JSON output mode preserves the original control characters.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify that ANSI escape sequences in repository-derived strings are replaced with caret notation in human-readable output.
2. Verify that control bytes in human-readable output are neutralized and visible.
3. Verify that JSON output mode preserves the original control characters.

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}