
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@socialtables/changesets
Advanced tools
<!-- START doctoc generated TOC please keep comment here to allow auto update --> <!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
GH_TOKEN environment variable must exist at runtimeGH_TOKEN user must have write access to the given repositoryNote: There's a GH_TOKEN defined in the st-global CircleCI context
$ npm install -g @socialtables/changesets
$ st-changeset COMMAND
running command...
$ st-changeset (--version)
@socialtables/changesets/2.0.1 linux-x64 node-v18.16.0
$ st-changeset --help [COMMAND]
USAGE
$ st-changeset COMMAND
...
The following options are available as extra .changeset/config.json options
{
// ...,
"stExtended": {
// If true, only the root package.json of a monorepo will be versioned
"rootOnly": <boolean, default false>
}
}
st-changeset listst-changeset releasest-changeset release:publishst-changeset release:tagsst-changeset release:version [PRERELEASE]st-changeset statusst-changeset listList package versions that st-changeset will create
USAGE
$ st-changeset list [-d <value>]
FLAGS
-d, --dir=<value> [default: /home/circleci/project/packages/changesets]
DESCRIPTION
List package versions that st-changeset will create
See code: dist/commands/list.ts
st-changeset releaseRun version, publish and push tags in one go
USAGE
$ st-changeset release [--strict]
FLAGS
--strict Command will fail if a package has changes but no changesets
DESCRIPTION
Run version, publish and push tags in one go
See code: dist/commands/release/index.ts
st-changeset release:publishPublish all packages that have versions not yet published to the registry
USAGE
$ st-changeset release:publish [--packages <value>] [--dryRun]
FLAGS
--dryRun Will not actually publish to the registry
--packages=<value> Comma separated list of package names to publish
DESCRIPTION
Publish all packages that have versions not yet published to the registry
See code: dist/commands/release/publish.ts
st-changeset release:tagsPush provided tags to remote
USAGE
$ st-changeset release:tags --tags <value>
FLAGS
--tags=<value> (required) Comma separated list of tags
DESCRIPTION
Push provided tags to remote
See code: dist/commands/release/tags.ts
st-changeset release:version [PRERELEASE]Consume changesets and generate tags
USAGE
$ st-changeset release:version [PRERELEASE] [--strict]
ARGUMENTS
PRERELEASE Prerelease identifier
FLAGS
--strict Command will fail if a package has changes but no changesets
DESCRIPTION
Consume changesets and generate tags
See code: dist/commands/release/version.ts
st-changeset statusPrint packages with changes and their changesets
USAGE
$ st-changeset status [-d <value>] [--strict] [--since <value>]
FLAGS
-d, --dir=<value> [default: /home/circleci/project/packages/changesets]
--since=<value> A branch name or commit hash to check since (defaults to last merge to main)
--strict Command will fail if a package has changes but no changesets
DESCRIPTION
Print packages with changes and their changesets
See code: dist/commands/status.ts
FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.