changelogen - npm Package Compare versions

Comparing version 0.5.3 to 0.5.4

dist/index.d.ts

@@ -18,2 +18,3 @@ type RepoProvider = "github" | "gitlab" | "bitbucket";
     preid?: string;
+    suffix?: boolean;
 };
@@ -35,2 +36,7 @@ declare function bumpVersion(commits: GitCommit[], config: ChangelogConfig, opts?: BumpVersionOptions): Promise<string | false>;
     output: string | boolean;
+    publish: {
+        args?: string[];
+        tag?: string;
+        private?: boolean;
+    };
     templates: {
@@ -37,0 +43,0 @@ commitMessage?: string;

package.json

 {
   "name": "changelogen",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "Generate Beautiful Changelogs using Conventional Commits",
@@ -11,2 +11,3 @@ "repository": "unjs/changelogen",
     ".": {
+      "types": "./dist/index.d.ts",
       "import": "./dist/index.mjs",
@@ -26,31 +27,32 @@ "require": "./dist/index.cjs"
   "dependencies": {
-    "c12": "^1.2.0",
-    "colorette": "^2.0.19",
-    "consola": "^3.0.1",
+    "c12": "^1.4.2",
+    "colorette": "^2.0.20",
+    "consola": "^3.2.2",
     "convert-gitmoji": "^0.1.3",
     "execa": "^7.1.1",
     "mri": "^1.2.0",
-    "node-fetch-native": "^1.1.0",
-    "ofetch": "^1.0.1",
+    "node-fetch-native": "^1.2.0",
+    "ofetch": "^1.1.1",
     "open": "^9.1.0",
-    "pathe": "^1.1.0",
-    "pkg-types": "^1.0.2",
+    "pathe": "^1.1.1",
+    "pkg-types": "^1.0.3",
     "scule": "^1.0.0",
-    "semver": "^7.4.0",
-    "yaml": "^2.2.1"
+    "semver": "^7.5.3",
+    "std-env": "^3.3.3",
+    "yaml": "^2.3.1"
   },
   "devDependencies": {
-    "@types/node": "^18.15.11",
-    "@types/semver": "^7.3.13",
-    "@vitest/coverage-c8": "^0.30.1",
-    "eslint": "^8.38.0",
-    "eslint-config-unjs": "^0.1.0",
+    "@types/node": "^20.3.3",
+    "@types/semver": "^7.5.0",
+    "@vitest/coverage-v8": "^0.32.4",
+    "eslint": "^8.44.0",
+    "eslint-config-unjs": "^0.2.1",
     "jiti": "^1.18.2",
-    "prettier": "^2.8.7",
+    "prettier": "^2.8.8",
     "standard-version": "^9.5.0",
-    "typescript": "^5.0.4",
-    "unbuild": "^1.2.0",
-    "vitest": "^0.30.1"
+    "typescript": "^5.1.6",
+    "unbuild": "^1.2.1",
+    "vitest": "^0.32.4"
   },
-  "packageManager": "pnpm@8.2.0",
+  "packageManager": "pnpm@8.6.5",
   "scripts": {
@@ -57,0 +59,0 @@ "build": "unbuild",

README.md

@@ -43,3 +43,8 @@ # changelogen
 - `--bump`: Determine semver change and update version in `package.json`.
-- `--release`. Bumps version in `package.json` and creates commit and git tags using local `git`. You can disable commit using `--no-commit` and tag using `--no-tag`.
+- `--release`. Bumps version in `package.json` and creates commit and git tags using local `git`. You can disable commit using `--no-commit` and tag using `--no-tag`. You can enable the automatic push of the new tag and release commit to your git repository by adding `--push`.
+- `--publish`. Publishes package as a new version on `npm`. You will need to set authorisation tokens separately via `.npmrc` or environment variables.
+- `--publishTag` Use custom npm tag for publishing (Default is `latest`)
+- `--nameSuffix`: Adds suffix to package name (Example: `--nameSuffix canary` renames `foo` to `foo-canary`)
+- `--versionSuffix`: Adds suffix to package version. When set without value or to `true`, uses date + commit hash as commit
+- `--canary`. Shortcut to `--bump --versionSuffix` (`--nameSuffix` will be also added if arg has a string value).
 - `-r`: Release as specific version.
@@ -46,0 +51,0 @@ - `--major`: Bump as a semver-major version

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

72320

increased by8.25%

Lines of code

1908

increased by8.66%

Number of lines in readme file

108

increased by4.85%

Worsened metrics

Dependency count

15

increased by7.14%

Number of low supply chain risk alerts

17

increased by13.33%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedstd-env@^3.3.3

• + Addednypm@0.3.11(transitive)

• + Addedstd-env@3.7.0(transitive)

• - Removednypm@0.3.12(transitive)

• Updatedc12@^1.4.2

• Updatedcolorette@^2.0.20

• Updatedconsola@^3.2.2

• Updatednode-fetch-native@^1.2.0

• Updatedofetch@^1.1.1

• Updatedpathe@^1.1.1

• Updatedpkg-types@^1.0.3

• Updatedsemver@^7.5.3

• Updatedyaml@^2.3.1