
Security News
Google’s OSV Fix Just Added 500+ New Advisories — All Thanks to One Small Policy Change
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
@goodcity/release-notes
Advanced tools
This command line utility will generate release notes based on the commit messages
It will
The generator will try it's best to determine the name of the project based on any package.json
file or the git repo url. That can be overriden using the --app-name <name>
option
The --pdf
option can be used to generate a pdf file with all the release notes in it
If the --clipboard
option is present, the markdown will be copied to your clipboard
If the --email-to
option is present, it will email the notes using sendgrid. An api key is required
e.g --email-to "email@host.com,email2@host.com"
The subject of the mail can be overriden using --email-subject "Mail Subject"
By default, the generator will try to compare the origin/master
branch to the origin/live
branch.
That can be overriden to point to another branch or commit sha using the --head <head>
and --base <base>
options.
This is useful when hooking it up to github actions, the pull_request
type provides variables such as ${{github.event.pull_request.head.sha}}
which can be used.
npx @goodcity/release-notes
The tool can be run without any configurations, but specific JIRA and SENDGRID integrations can be configured via the following environment variables :
Name | Default value | Description |
---|---|---|
SENDGRID_API_KEY | null | API Key used for mailing |
JIRA_HOST | jira.crossroads.org.hk | The JIRA endpoint to connect to |
JIRA_USERNAME | input request | The JIRA username |
JIRA_PASSWORD | input request | The JIRA passworld |
$> npx @goodcity/release-notes --help
Usage: @goodcity/release-notes [options]
Options:
-V, --version output the version number
-p, --pdf ouputs to pdf
-c, --clipboard copies the markdown to your clipboard
-h, --head <head> The head ref or source branch (default: "origin/master")
-b, --base <base> The base ref or target branch (default: "origin/live")
--email-to <email> Recipients for the release notes
--email-subject <subject> Subject of the email
--app-name <name> Name of the app
--jira-code <code> Jira ticket code (default: "GCW")
--unshallow Unshallows a shallow repository before reading the commites
--help display help for command
Example: This will trigger a release email when a branch is merged into the live
branch
# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
name: Forward release notes
on:
pull_request:
types: [closed]
branches:
- live
jobs:
release-notes:
runs-on: ubuntu-latest
if: github.event.pull_request.merged == true
steps:
- uses: actions/checkout@v2
- name: Use Node.js 12.x
uses: actions/setup-node@v1
with:
node-version: 12.x
- name: Generate and email notes
run: npx @goodcity/release-notes --email-to "some@email.com" --head ${{github.event.pull_request.head.sha}} --base ${{github.event.pull_request.base.sha}} --email-subject "🚀 My App Release 🚀" --app-name "My App"
env:
JIRA_USERNAME: ${{secrets.jira_username}}
JIRA_PASSWORD: ${{secrets.jira_password}}
SENDGRID_API_KEY: ${{secrets.sendgrid_api_key}}
FAQs
Release note generator
The npm package @goodcity/release-notes receives a total of 0 weekly downloads. As such, @goodcity/release-notes popularity was classified as not popular.
We found that @goodcity/release-notes demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
Research
/Security News
175 malicious npm packages (26k+ downloads) used unpkg CDN to host redirect scripts for a credential-phishing campaign targeting 135+ organizations worldwide.
Security News
Python 3.14 adds template strings, deferred annotations, and subinterpreters, plus free-threaded mode, an experimental JIT, and Sigstore verification.