Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
ag-balena-versionist
Advanced tools
Balena versionist is an utility built around versionist to inject a custom configuration based on the project type.
Balena versionist is an utility built around versionist to inject a custom configuration based on the project type.
It exports a function runBalenaVersionst(path: string)
which will check for a repo.yml
at
the specified path, if one is found and it contains a valid type
, a custom versionist.conf.js file will be generated and injected before calling versionist
. If no repo.yml
is found, it will call versionist
with no config argument.
The module can also be used as a CLI tool by calling balena-versionist [path]
(defaults to cwd
)
Note that versionist
is not included as a dependency in balena-versionist
(yet) and must be installed separately to work.
The repo.yml
accepts the following options:
type: string
upstream:
- repo: string
url: string
publishMetadata: bool
release: 'github' | 'none'
sentry:
org: string
team: string
type: string
triggerNotification:
version: string
stagingPercentage: number
Each folder in repo-type-mappings
corresponds to a valid type; each folder contains the configuration that will be injected and a list of the node dependencies needed by the custom config.
The list of upstreams is interpolated in the versionist configuration file and used to populate nested changelogs, the field can be omitted if there is no upstream that supports nested changelogs.
Enum of possible release targets, currently only supports github
. If set, a github draft release will be built for each PR (generated artefacts depend on the project type); on merge the release will be published.
If set to true, a file called scrutinizer.json
will be published on the gh-pages
branch of the repo on merge, this file contains information about the state of the repo that can be consumed by other tools
If this entry is set, each PR will create a corresponding sentry project and expose the DSN token to the build.
This field is electron specific. If set in a meta-PR it will update the latest.yml files for the release matching the specified version with the stagingPercentage value (defaults to 100).
An example of a valid configuration is:
type: generic
upstream:
- repo: balena-versionist
url: https://github.com/balena-io/balena-versionist
publishMetadata: true
FAQs
Balena versionist is an utility built around versionist to inject a custom configuration based on the project type.
The npm package ag-balena-versionist receives a total of 1 weekly downloads. As such, ag-balena-versionist popularity was classified as not popular.
We found that ag-balena-versionist demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.