Security News
NVD Backlog Tops 20,000 CVEs Awaiting Analysis as NIST Prepares System Updates
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
@semantic-release/commit-analyzer
Advanced tools
The @semantic-release/commit-analyzer npm package is a plugin for the semantic-release ecosystem that analyzes commits to determine the type of version bump (if any) that should be applied according to semantic versioning principles. It uses commit messages to figure out the next semantic version based on the changes made.
Analyze Commits
This feature analyzes an array of commit messages and determines the type of version bump needed. In the code sample, a commit message is analyzed, and the callback function logs the release type, which in this case is 'patch'.
const analyzeCommits = require('@semantic-release/commit-analyzer');
analyzeCommits({}, {commits: [{message: 'fix(pencil): stop graphite breaking when too much pressure applied'}]}, (err, type) => {
console.log(type); // prints 'patch'
});
Configuration
This feature allows users to configure the commit analyzer by specifying custom release rules and parser options. The code sample shows a configuration object that defines custom rules for determining the release type based on commit types and scopes.
{
"releaseRules": [
{"type": "feat", "release": "minor"},
{"type": "fix", "release": "patch"},
{"type": "perf", "release": "patch"},
{"scope": "no-release", "release": false}
],
"parserOpts": {
"noteKeywords": ["BREAKING CHANGE", "BREAKING CHANGES"]
}
}
Conventional Changelog is a set of tools for parsing conventional commit messages. It's similar to @semantic-release/commit-analyzer in that it can be used to determine version bumps and generate changelogs, but it provides a more comprehensive set of tools for generating changelogs from git metadata.
Commitlint checks if your commit messages meet the conventional commit format. While it doesn't directly analyze commits to determine version bumps, it ensures that commit messages are formatted in a way that tools like @semantic-release/commit-analyzer can accurately analyze them.
Standard Version is a utility for versioning using semver and CHANGELOG generation powered by Conventional Commits. It automates the versioning and changelog process but does not provide the same plugin-based architecture as @semantic-release/commit-analyzer.
FAQs
semantic-release plugin to analyze commits with conventional-changelog
We found that @semantic-release/commit-analyzer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.