
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
changelog-gen-ai
Advanced tools
AI-powered changelog generator for GitHub and GitLab repositories. Analyzes git commits and uses OpenAI to generate well-formatted changelogs following the Keep a Changelog specification.
# Install globally
npm install -g changelog-gen
# Or use directly with npx
npx changelog-gen generate
export OPENAI_API_KEY="your-api-key"
# Generate changelog from the latest tag to HEAD
changelog-gen generate --from latest-tag
# Preview without writing (dry run)
changelog-gen generate --from latest-tag --dry-run
# Specify a version
changelog-gen generate --from v1.0.0 --version 1.1.0
Create a .changelogrc.yaml file in your project root:
# Output file path
output: CHANGELOG.md
# OpenAI-compatible API endpoint
openaiUrl: https://api.openai.com/v1
# Model to use
model: gpt-4o-mini
# Version detection method: tags | changelog | manual
versionSource: tags
# Include commit links
includeCommitLinks: true
# Patterns to exclude
excludePatterns:
- "chore(deps):"
- "Merge branch"
Generate a default config file:
changelog-gen init
changelog-gen generateGenerate changelog entries from git commits.
| Option | Description | Default |
|---|---|---|
-f, --from <ref> | Starting point (tag, SHA, or "latest-tag") | Auto-detected |
-t, --to <ref> | End point | HEAD |
-o, --output <file> | Output file path | CHANGELOG.md |
-u, --openai-url <url> | OpenAI API endpoint | https://api.openai.com/v1 |
-k, --api-key <key> | OpenAI API key | OPENAI_API_KEY env |
-m, --model <model> | Model to use | gpt-4o-mini |
-v, --version <version> | Version string | Auto-incremented |
-c, --config <file> | Config file path | .changelogrc.yaml |
-d, --dry-run | Preview without writing | false |
changelog-gen initCreate a default configuration file.
| Option | Description |
|---|---|
-f, --force | Overwrite existing config file |
- name: Generate Changelog
env:
OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
run: npx changelog-gen generate --from latest-tag
See examples/github-action.yml for a complete workflow.
changelog:
image: node:20
script:
- npx changelog-gen generate --from latest-tag
variables:
GIT_DEPTH: 0
See examples/gitlab-ci.yml for complete examples.
changelog-gen works with any OpenAI-compatible API. To use with local models:
# Start Ollama with an appropriate model
ollama run llama3.1
# Use with changelog-gen
changelog-gen generate --openai-url http://localhost:11434/v1 --model llama3.1
# Start LM Studio server, then:
changelog-gen generate --openai-url http://localhost:1234/v1 --model local-model
Generated changelogs follow the Keep a Changelog format:
# Changelog
All notable changes to this project will be documented in this file.
## [1.1.0] - 2024-01-15
### Added
- User authentication with OAuth support
- Dark mode theme option
### Changed
- Improved performance of data loading
### Fixed
- Resolved issue with form validation on mobile devices
| Variable | Description |
|---|---|
OPENAI_API_KEY | OpenAI API key (required) |
MIT
FAQs
AI-powered changelog generator for GitHub and GitLab repositories
The npm package changelog-gen-ai receives a total of 0 weekly downloads. As such, changelog-gen-ai popularity was classified as not popular.
We found that changelog-gen-ai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.