commit-stream - npm Package Compare versions

Comparing version 2.1.0 to 2.2.0

CHANGELOG.md

@@ -0,1 +1,16 @@
+## [2.2.0](https://github.com/nodejs/commit-stream/compare/v2.1.0...v2.2.0) (2024-11-27)
+
+### Features
+
+* add cveId support ([6c82ccd](https://github.com/nodejs/commit-stream/commit/6c82ccd24e44167433126ba2bf4e95c8c4f41297))
+
+### Bug Fixes
+
+* add permissions: write to create release action ([776bc30](https://github.com/nodejs/commit-stream/commit/776bc302aebaef471870b56586572225325af238))
+
+### Tests
+
+* add CVE-ID test ([0748578](https://github.com/nodejs/commit-stream/commit/0748578e475534d96be8e4b9f306f5d84c7e383a))
+* fix sha cve id pr ([670b4ab](https://github.com/nodejs/commit-stream/commit/670b4abd056ca4099e8dcb02d31504a857db991c))
+
 ## [2.1.0](https://github.com/rvagg/commit-stream/compare/v2.0.1...v2.1.0) (2023-05-16)
@@ -2,0 +17,0 @@

commit-stream.js

@@ -49,2 +49,4 @@ import through2 from 'through2'
       commit.reviewers.push({ name: m[1], email: m[2] })
+    } else if ((m = line.match(/\bCVE-ID:\s+(CVE-\d{4}-\d{5})\b/)) !== null) {
+      commit.cveId = m[1];
     } else if ((m = line.match(/^\s+PR(?:[- ]?URL)?:?\s*(.+)\s*$/) || line.match(/\(#(\d+)\)$/)) !== null) {
@@ -51,0 +53,0 @@ commit.prUrl = m[1]

package.json

 {
   "name": "commit-stream",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Turn a `git log` into a stream of commit objects",
@@ -14,3 +14,3 @@ "main": "commit-stream.js",
     "type": "git",
-    "url": "https://github.com/rvagg/commit-stream.git"
+    "url": "https://github.com/nodejs/commit-stream.git"
   },
@@ -20,5 +20,5 @@ "author": "Rod <[e-mail]> (http://r.va.gg/)",
   "bugs": {
-    "url": "https://github.com/rvagg/commit-stream/issues"
+    "url": "https://github.com/nodejs/commit-stream/issues"
   },
-  "homepage": "https://github.com/rvagg/commit-stream",
+  "homepage": "https://github.com/nodejs/commit-stream",
   "devDependencies": {
@@ -25,0 +25,0 @@ "bl": "^6.0.1",

test.js

@@ -227,1 +227,20 @@ import commitStream from './commit-stream.js'
 })
+
+test('cve id', function (t) {
+  gitToList(t, 'git log', 'rvagg', 'commit-stream', function (err, list) {
+    t.error(err, 'no error')
+
+    t.ok(list && list.length > 1, 'got a list')
+
+    t.deepEqual(list[list.length - 30], {
+      sha: '6c82ccd24e44167433126ba2bf4e95c8c4f41297',
+      authors: [
+        { name: 'RafaelGSS', email: '[e-mail]' }
+      ],
+      authorDate: 'Fri Nov 22 00:19:29 2024 -0300',
+      author: { name: 'RafaelGSS', email: '[e-mail]' },
+      summary: 'feat: add cveId support',
+      cveId: 'CVE-2024-12345'
+    }, 'got correct pr url for green-button merge')
+  })
+})

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

22112

6.87%

Lines of code

330

5.77%

No dependency changes