Security News
NVD Backlog Tops 20,000 CVEs Awaiting Analysis as NIST Prepares System Updates
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
@semantic-release/commit-analyzer
Advanced tools
Customizable commit-analyzer plugin for semantic-release
The @semantic-release/commit-analyzer npm package is a plugin for the semantic-release ecosystem that analyzes commits to determine the type of version bump (if any) that should be applied according to semantic versioning principles. It uses commit messages to figure out the next semantic version based on the changes made.
Analyze Commits
This feature analyzes an array of commit messages and determines the type of version bump needed. In the code sample, a commit message is analyzed, and the callback function logs the release type, which in this case is 'patch'.
const analyzeCommits = require('@semantic-release/commit-analyzer');
analyzeCommits({}, {commits: [{message: 'fix(pencil): stop graphite breaking when too much pressure applied'}]}, (err, type) => {
console.log(type); // prints 'patch'
});
Configuration
This feature allows users to configure the commit analyzer by specifying custom release rules and parser options. The code sample shows a configuration object that defines custom rules for determining the release type based on commit types and scopes.
{
"releaseRules": [
{"type": "feat", "release": "minor"},
{"type": "fix", "release": "patch"},
{"type": "perf", "release": "patch"},
{"scope": "no-release", "release": false}
],
"parserOpts": {
"noteKeywords": ["BREAKING CHANGE", "BREAKING CHANGES"]
}
}
Conventional Changelog is a set of tools for parsing conventional commit messages. It's similar to @semantic-release/commit-analyzer in that it can be used to determine version bumps and generate changelogs, but it provides a more comprehensive set of tools for generating changelogs from git metadata.
Commitlint checks if your commit messages meet the conventional commit format. While it doesn't directly analyze commits to determine version bumps, it ensures that commit messages are formatted in a way that tools like @semantic-release/commit-analyzer can accurately analyze them.
Standard Version is a utility for versioning using semver and CHANGELOG generation powered by Conventional Commits. It automates the versioning and changelog process but does not provide the same plugin-based architecture as @semantic-release/commit-analyzer.
Customizable commit-analyzer plugin for semantic-release based on conventional-changelog
By default commit-analyzer
uses the angular
format described in Angular convention.
Additionnal options can be set within the plugin definition in package.json
to use a different commit format and to customize it:
{
"release": {
"analyzeCommits": {
"preset": "angular",
"releaseRules": [
{"type": "docs", "scope":"README", "release": "patch"},
{"type": "refactor", "release": "patch"},
{"type": "style", "release": "patch"}
],
"parserOpts": {
"noteKeywords": ["BREAKING CHANGE", "BREAKING CHANGES", "BREAKING"]
}
}
}
}
Option | Description | Default |
---|---|---|
preset | conventional-changelog preset (possible values: angular , atom , codemirror , ember , eslint , express , jquery , jscs , jshint ). | angular |
config | NPM package name of a custom conventional-changelog preset. | - |
releaseRules | An external module, a path to a module or an Array of rules. See Release rules. | See Release rules |
parserOpts | Additional conventional-commits-parser options that will extends ones loaded by preset or config . See Parser options. | - |
NOTE: config
will be overwritten by the values of preset
. You should use either preset
or config
, but not both. Individual properties of parserOpts
will overwrite ones loaded with preset
or config
.
This is an Array
of rule objects. A rule object has a release
property and 1 or more criteria.
{
"release": {
"analyzeCommits": {
"preset": "angular",
"releaseRules": [
{"type": "docs", "scope": "README", "release": "patch"},
{"type": "refactor", "scope": "/core-.*/", "release": "minor"},
{"type": "refactor", "release": "patch"}
]
}
}
}
Each commit will be compared with each rule and when it matches, the commit will be associated with the release type in the rule's release
property. If a commit match multiple rules, the highest release type (major
> minor
> patch
) is associated with the commit.
See release types for the release types hierarchy.
With the previous example:
type
'docs' and scope
'README' will be associated with a patch
release.type
'refactor' and scope
starting with 'core-' (i.e. 'core-ui', 'core-rules', ...) will be associated with a minor
release.type
'refactor' (without scope
or with a scope
not matching the regexp /core-.*/
) will be associated with a patch
release.If a commit doesn't match any rule in releaseRules
it will be evaluated agaisnt the default release rules.
With the previous example:
minor
release.type
'feat' will be associated with a minor
release.type
'fix' will be associated with a patch
release.type
'perf' will be associated with a patch
release.If a commit doesn't match any rules in releaseRules
or in default release rules then no release type will be associated with the commit.
With the previous example:
type
'style' will not be associated with a release type.type
'test' will not be associated with a release type.type
'chore' will not be associated with a release type.If there is multiple commits that match one or more rules, the one with the highest realease type will determine the global release type.
Considering the following commits:
docs(README): Add more details to the API docs
feat(API): Add a new method to the public API
With the previous example the release type determine by the plugin will be minor
.
The properties to set in the rules will depends on the commit style choosen. For example conventional-changelog-angular use the commit properties type
, scope
and subject
but conventional-changelog-eslint uses tag
and message
.
For example with eslint
preset:
{
"release": {
"analyzeCommits": {
"preset": "eslint",
"releaseRules": [
{"tag": "Docs", "message":"/README/", "release": "patch"},
{"type": "New", "release": "patch"}
]
}
}
}
With this configuration:
tag
'Docs', that contains 'README' in their header message will be associated with a patch
release.tag
'New' will be associated with a patch
release.tag
'Breaking' will be associated with a major
release (per default release rules).tag
'Fix' will be associated with a patch
release (per default release rules).tag
'Update' will be associated with a minor
release (per default release rules).tag
'New' will be associated with a minor
release (per default release rules).releaseRules
can also reference a module, either by it's npm
name or path:
{
"release": {
"analyzeCommits": {
"preset": "angular",
"releaseRules": "./config/release-rules.js"
}
}
}
// File: config/release-rules.js
module.exports = [
{type: 'docs', scope: 'README', release: 'patch'},
{type: 'refactor', scope: /core-.*/, release: 'minor'},
{type: 'refactor', release: 'patch'},
];
Allow to overwrite specific conventional-commits-parser options. This is convenient to use a conventional-changelog preset with some customizations without having to create a new module.
The following example uses Angular convention but will consider a commit to be a breaking change if it's body contains BREAKING CHANGE
, BREAKING CHANGES
or BREAKING
. By default the preset checks only for BREAKING CHANGE
and BREAKING CHANGES
.
{
"release": {
"analyzeCommits": {
"preset": "angular",
"parserOpts": {
"noteKeywords": ["BREAKING CHANGE", "BREAKING CHANGES", "BREAKING"],
}
}
}
}
FAQs
semantic-release plugin to analyze commits with conventional-changelog
The npm package @semantic-release/commit-analyzer receives a total of 1,173,233 weekly downloads. As such, @semantic-release/commit-analyzer popularity was classified as popular.
We found that @semantic-release/commit-analyzer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.