
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
@goodcity/release-notes
Advanced tools
This command line utility will generate release notes based on the commit messages
It will
The generator will try it's best to determine the name of the project based on any package.json
file or the git repo url. That can be overriden using the --app-name <name>
option
The --pdf
option can be used to generate a pdf file with all the release notes in it
If the --clipboard
option is present, the markdown will be copied to your clipboard
If the --email-to
option is present, it will email the notes using sendgrid. An api key is required
e.g --email-to "email@host.com,email2@host.com"
The subject of the mail can be overriden using --email-subject "Mail Subject"
By default, the generator will try to compare the origin/master
branch to the origin/live
branch.
That can be overriden to point to another branch or commit sha using the --head <head>
and --base <base>
options.
This is useful when hooking it up to github actions, the pull_request
type provides variables such as ${{github.event.pull_request.head.sha}}
which can be used.
npx @goodcity/release-notes
The tool can be run without any configurations, but specific JIRA and SENDGRID integrations can be configured via the following environment variables :
Name | Default value | Description |
---|---|---|
SENDGRID_API_KEY | null | API Key used for mailing |
JIRA_HOST | jira.crossroads.org.hk | The JIRA endpoint to connect to |
JIRA_USERNAME | input request | The JIRA username |
JIRA_PASSWORD | input request | The JIRA passworld |
$> npx @goodcity/release-notes --help
Usage: @goodcity/release-notes [options]
Options:
-V, --version output the version number
-p, --pdf ouputs to pdf
-c, --clipboard copies the markdown to your clipboard
-h, --head <head> The head ref or source branch (default: "origin/master")
-b, --base <base> The base ref or target branch (default: "origin/live")
--email-to <email> Recipients for the release notes
--email-subject <subject> Subject of the email
--app-name <name> Name of the app
--jira-code <code> Jira ticket code (default: "GCW")
--unshallow Unshallows a shallow repository before reading the commites
--help display help for command
Example: This will trigger a release email when a branch is merged into the live
branch
# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
name: Forward release notes
on:
pull_request:
types: [closed]
branches:
- live
jobs:
release-notes:
runs-on: ubuntu-latest
if: github.event.pull_request.merged == true
steps:
- uses: actions/checkout@v2
- name: Use Node.js 12.x
uses: actions/setup-node@v1
with:
node-version: 12.x
- name: Generate and email notes
run: npx @goodcity/release-notes --email-to "some@email.com" --head ${{github.event.pull_request.head.sha}} --base ${{github.event.pull_request.base.sha}} --email-subject "🚀 My App Release 🚀" --app-name "My App"
env:
JIRA_USERNAME: ${{secrets.jira_username}}
JIRA_PASSWORD: ${{secrets.jira_password}}
SENDGRID_API_KEY: ${{secrets.sendgrid_api_key}}
FAQs
Release note generator
We found that @goodcity/release-notes demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.