Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
@release-it/bumper
Advanced tools
This plugin reads and/or writes version/manifest files.
npm install --save-dev @release-it/bumper
In release-it config:
"plugins": {
"@release-it/bumper": {
"out": "manifest.json"
}
}
In case the in
option is used, the version from this file will take precedence over the version
from package.json
or the latest Git tag (which release-it uses by default).
The default type
is application/json
, but text/plain
is also supported.
In that case the whole file is used to read and/or write the version.
"plugins": {
"@release-it/bumper": {
"in": { "file": "VERSION", "type": "text/plain" },
"out": { "file": "VERSION", "type": "text/plain" }
}
}
The out
option can also be an array of files:
"plugins": {
"@release-it/bumper": {
"out": ["manifest.json", "bower.json"]
}
}
The path
option (default: "version"
) can be used to change a different property. the following example will set the
deeper.current
property to the new version in manifest.json
:
"plugins": {
"@release-it/bumper": {
"out": { "file": "manifest.json", "path": "deeper.current" }
}
}
FAQs
Version read/write plugin for release-it
The npm package @release-it/bumper receives a total of 9,965 weekly downloads. As such, @release-it/bumper popularity was classified as popular.
We found that @release-it/bumper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.