
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
changelog-generator-azure-devops
Advanced tools
A library for generating changelogs from git tags and Azure DevOps work items
A Node.js library for generating professional changelogs from git tags and Azure DevOps work items.
npm install azure-devops-changelog-generator
Create a .env
file in your project root:
# Azure DevOps Configuration
AZURE_DEVOPS_ORG_URL=https://dev.azure.com/your-organization
AZURE_DEVOPS_ACCESS_TOKEN=your-personal-access-token-here
AZURE_DEVOPS_PROJECT=your-project-name
# Optional: Project display name for changelog header (defaults to AZURE_DEVOPS_PROJECT if not set)
AZURE_DEVOPS_PROJ_NAME=Internal Front
https://dev.azure.com/your-organization
.env
file# Run the interactive changelog generator
npx generate-changelog
# Or if installed globally
generate-changelog
The CLI will prompt you for:
v1.14.2
)v1.14.0
)Smart Pre-Release Detection: The tool automatically detects if you want pre-releases included:
-Number
(e.g., v1.14.0-1
), pre-releases will be includedv1.14.2
, v1.14.0
), pre-releases will be excludedThe generator will then create changelogs for all version pairs between your specified range.
const { ChangelogGenerator } = require('azure-devops-changelog-generator');
async function generateChangelog() {
// Smart detection example
const currentVersion = 'v1.14.2';
const previousVersion = 'v1.14.0-1'; // Pre-release
// Automatically detect if pre-releases should be included
const includePreReleases = ChangelogGenerator.shouldIncludePreReleases(currentVersion, previousVersion);
console.log('Pre-releases will be included:', includePreReleases); // true
const generator = new ChangelogGenerator(
'https://dev.azure.com/your-org',
'your-personal-access-token',
'your-project-name',
'Custom Project Display Name', // Optional: project display name for changelog header
includePreReleases // Or pass true/false to override smart detection
);
await generator.initialize();
const changelog = await generator.generateChangelog(currentVersion, previousVersion);
console.log(changelog);
}
-Number
(like v1.14.0-0
)## Your Project Name Here
**Version**: v1.14.2 [⚙ Pipeline](https://dev.azure.com/your-org/_build/results?buildId=9843)
### Includes
- 25217 - Incident - after clicking on new variants, a white screen appears
---
## Your Project Name Here
**Version**: v1.14.1 [⚙ Pipeline](https://dev.azure.com/your-org/_build/results?buildId=9840)
### Includes
- 24499 - Homepage product updates for July 2025 deployment
Note: The project name in the changelog header is configurable via the AZURE_DEVOPS_PROJ_NAME
environment variable or constructor parameter.
The library expects git tags in semantic versioning format:
v1.14.2
(release)v1.14.1
(release)v1.14.0-0
(pre-release, included only if specified)v1.14.0-1
(pre-release, included only if specified)By default, pre-release tags (ending with -Number
like v1.14.0-0
, v1.14.0-1
) are excluded from changelog generation. However, the tool includes smart automatic detection:
Smart Detection Logic:
-Number
), pre-releases are automatically includedExamples:
v1.14.2
→ v1.14.0
: Excludes pre-releases (both are regular releases)v1.14.0-2
→ v1.14.0-0
: Includes pre-releases (both are pre-releases)v1.14.2
→ v1.14.0-1
: Includes pre-releases (previous is pre-release)v1.14.0-3
→ v1.13.5
: Includes pre-releases (current is pre-release)Manual Override (Programmatic Usage):
true
/false
as the 5th parameter to the constructor to override smart detectionfilterTags()
method to manually filter tagsUse Cases for Pre-Releases:
v1.14.0-0
to v1.14.0-2
)The library automatically detects 5-digit work item IDs in commit messages:
25217 fix display of transition cost value
24499 Updated Products
123 small fix
(too short)new ChangelogGenerator(organizationUrl, personalAccessToken, project, projectDisplayName, includePreReleases)
Parameters:
organizationUrl
(string): Your Azure DevOps organization URLpersonalAccessToken
(string): Azure DevOps Personal Access Tokenproject
(string): Azure DevOps project name (used for API calls)projectDisplayName
(string, optional): Display name for the changelog header (defaults to AZURE_DEVOPS_PROJ_NAME
environment variable, then falls back to project
)includePreReleases
(boolean, optional): Whether to include pre-release tags (default: false)initialize()
Initializes the Azure DevOps API clients.
filterTags(tags)
Filters tags based on the includePreReleases
setting. Returns all tags if pre-releases are included, otherwise filters out pre-release tags.
shouldIncludePreReleases(currentVersion, previousVersion)
(static)Smart detection method that returns true
if either version tag is a pre-release, indicating that pre-releases should be included in the changelog.
generateChangelog(version, previousVersion)
Generates a changelog between two versions.
getCommitsBetweenTags(fromTag, toTag)
Gets filtered commits between two git tags.
extractWorkItemIds(commits)
Extracts work item IDs from commit messages.
getWorkItemDetails(workItemIds)
Fetches work item details from Azure DevOps.
getPipelineUrl(version)
Gets the pipeline URL for a specific version tag.
MIT
FAQs
A library for generating changelogs from git tags and Azure DevOps work items
The npm package changelog-generator-azure-devops receives a total of 3 weekly downloads. As such, changelog-generator-azure-devops popularity was classified as not popular.
We found that changelog-generator-azure-devops demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.