Security News
PyPI Introduces Digital Attestations to Strengthen Python Package Security
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
@dmsi/release-middleware
Advanced tools
At DMSi we have a growing number of Golang middleware services that each need to be tagged, released, and versioned at the end of every version.
Release Middleware attempts to take a monorepo approach to releasing each package/repo with a single command.
Use of release middleware assumes that you have all of the current middleware services pulled down. If you're not sure what you're missing run this in your terminal:
curl -X POST -H "Content-Type: application/json" "https://miami.dmsi.com/graphql" -d "{ \"query\": \"query M { meta { services } }\" }" | python -m json.tool
In addition it is important to ensure that you have recently run go get
in each repository to ensure their dependencies are up-to-date. This step will likely be automated in a future version.
To run release-middleware simply run:
npx release-middleware --a <agility version>
This will checkout the latest changes on each develop branch (any local changes will be reset in this step) and branch off into the appropriate release branch. Then add any changes are committed (usually an empty commit for posterity) and a release tag added. The release branch is then merged into master which also has previously had its latest changes pulled down. The master branch and tag are pushed up to origin and the script cleans up the local environment, deleting the local release branch and merging master into develop.
FAQs
A tool to tag and release each middleware api service.
The npm package @dmsi/release-middleware receives a total of 0 weekly downloads. As such, @dmsi/release-middleware popularity was classified as not popular.
We found that @dmsi/release-middleware demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.