
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
@ls-age/bump-version
Advanced tools
Automated npm and GitHub releases based on commit messages. Follow the Angular commit message guideline,
bump-version
does the rest!
bump-version
assues you have two release branches: master
and beta
. Each commit in these branches that is marked as a fix, feature or breaking change in it's commit message triggers a new release.
beta
trigger prereleases, changes to master
trigger regular releases.1.2.3 -> 1.2.4
), a features increments the minor (1.2.3 -> 1.3.0
) and a breaking changes change the major version component (1.2.3 -> 2.0.0
)../out/
directory by default) added.package.json
doesn't contain "private": true
.For further information take a look at the complete guideline in the angular respoitory.
fix(scope): Prevent an error
: Triggers a patch releasefeat(scope): Something new added
: Triggers a minor releasebreak(scope): Major API change
: Triggers a major releaseWith nodejs installed run npm install --save-dev @ls-age/bump-version
to add bump-version
as a dependency.
npx bump-version --gh-token <GITHUB API TOKEN>
Take a look at this respository's CircleCI configuration for a real-world usage example.
For available options run npx bump-version --help
.
FAQs
Automated npm and GitHub releases based on commit messages
We found that @ls-age/bump-version demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.