
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@sv-oss/changelog-autotagger
Advanced tools
Automatically tags JIRA tickets generated through a changelog with the relevant release number
changelog-autotagger is a CLI for extracting tickets out of a changelog generated by standard-version, and adding a tag to those tickets in JIRA.
Two options are required for changelog-autotagger to function, first being a relative path to the changelog file. Second being the version that you want to tag the release as.
Note - all tickets in the changelog supplied will be tagged. If you supply the running changelog, it will try to re-tag every issue each execution. It is recommended that you extract just the latest release details and supply it as the source file.
There are 2 key ways to use changelog-autotagger. First is through npx as below:
npx @sv-oss/changelog-autotagger ./my-release-notes.txt --release-version=1.2.3
Second is to add it as a global dependency and invoke it directly
yarn global add @sv-oss/changelog-autotagger
// or
npm i -g @sv-oss/changelog-autotagger
changelog-autotagger ./my-release-notes.txt --release-version=1.2.3
Out of the box, the JIRA client uses https authentication. To connect to your JIRA instance, you need to export the below environment variables:
export JIRA_ADAPTER_HOST=YOUR_JIRA_INSTANCE.atlassian.net
export JIRA_ADAPTER_USERNAME=YOUR_USERNAME
export JIRA_ADAPTER_PASSWORD=YOUR_PASSWORD_TOKEN
JIRA has disabled API access via direct password. See Manage API tokens for your Atlassian account for more details and instructions for setting up a token.
Param name | Description | Usage | Expected |
---|---|---|---|
--prefix | A prefix supplied before each version when creating it in each project | --prefix=hi | fixVersion=hi-1.0.0 |
--adapter-path | Allows user to supply a custom adapter - see details below | --adapter-path=./my-adapter.js | Custom adapter used |
A custom adapter may be used if you're using something other than JIRA to manage tickets, or if you're wanting to authenticate JIRA via a method other than https.
Pull requests are welcome for any additional adapter types, for common ones they will be reviewed and accepted.
An adapter is required to implement the following methods:
export default {
verifyIssueExists: (issueId: string) => Promise<boolean>;
createVersion: (projectId: ReturnType<getProjectId>, name: string, releaseDate: string, options: any) => Promise<void>;
getProjectId: (projectName: string) => Promise<any>;
tagFixVersion: (ticketId: string, fixVersion: string) => Promise<void>;
}
FAQs
Automatically tags JIRA tickets generated through a changelog with the relevant release number
We found that @sv-oss/changelog-autotagger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.