Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
@codastic/release
Advanced tools
A collection of release and changelog management script you can easily use via NPM.
A collection of release and changelog management script you can easily use via NPM.
$ npm install @codastic/release
CHANGELOG.md
containing all commits starting with Merge pull request…
.CHANGELOG.md
.Running npm install @codastic/release
adds the following scripts to you local node_modules/.bin
folder:
update-changelog: Adds merged pulled requests since last versioned release to CHANGELOG.md
,
Supports pull requests from Github and Bitbucket.
release: Bumps a new versioned release of the current state into CHANGELOG.md
and package.json
.
release-github: Creates a Github release by zipping and uploading the build folder and using current version number from package.json
.
To integrate the release process into your project/package just run $ npm install --save-dev @codastic/release
.
Then use the installed scripts in you package.json
scripts. e.g.
{
"scripts": {
"build": "[your build command]",
"changes": "update-changelog --dry-run .",
"prerelease": "npm run -s test && update-changelog .",
"release": "release .",
"postrelease": "npm run -s build && release-github ./ ./dist",
"test": "[your test command]"
}
}
$ update-changelog ROOT_DIR [OPTIONS]
--help
: Outputs help.
--dry-run
: (optional) Outputs changes instead of writing to CHANGELOG.md
.
--since
: (optional) Limit search for pull requests to the given ISO date (e.g. --since='2017-01-01'
).
--hide-reviewer
: (optional) If set the reviewer will not be put into the CHANGELOG.md
.
--interactive
: (optional) If set every addition to the changelog has to be confirmed manually.
--link-commit
: optional If set the commit hash in the output will be linked. Expects a template URL in the form of "http://example.com/:commit".
$ release NPM_PACKAGE_DIR [<newversion> | major | minor | patch | prerelease] [options]
--help
: Outputs help.
--push-build
: (optional) Push the build in this ignored folder to the version branch.
--target-branch
: (optional) (default: MAJOR.x) The branch where the release will be pushed to (e.g. --target-branch='master'
).
--build-command
: (optional) Run the build to be able to include the new version from package.json
(e.g --build-command='npm run build' ./"
). Also adds and commits the build files if they are not ignored.
$ github-release ROOT_DIR BUILD_DIR
If you run this script the first time, it asks for a GitHub token, which will be stored in [ROOT_DIR]/.github-release
. Here you can learn how how create your personal GitHub token.
IMPORTANT To prevent pushing your personal token to a remote you should add this file to your .gitignore
.
--help
: Outputs help.node --version # 6.10 or higher
git --version # 2.7 or higher
git remote set-url origin git@github.com:SevenOneMedia/adtec-core.git
.git-release
. Make sure the following permissions are granted when creating a new token on GitHub:[x] repo Full control of private repositories
FAQs
A collection of release and changelog management script you can easily use via NPM.
We found that @codastic/release demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.