
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
create-app-release
Advanced tools
An AI-powered GitHub release automation tool that helps you create release pull requests with automatically generated summaries using various LLM providers. The tool intelligently groups your changes and creates professional release notes, making the release process smoother and more efficient.
gpt-4o, gpt-3.5-turbo.gemini-pro via API key or local gemini-cli.git config.Run the tool directly using npx:
npx create-app-release
On the first run, the tool will guide you through setting up the necessary tokens and configurations.
You will need a GitHub Token and an API key for your chosen AI provider.
GitHub Token - Create at GitHub Token Settings
repogithub.tokenOpenAI API Key - Get from OpenAI Platform
openai provider.openai.tokenGemini API Key - Get from Google AI Studio
gemini provider.gemini.token--ai-provider <provider>
: Select the AI provider.
: Options: openai, gemini, gemini-cli.
: If not specified, you will be prompted to choose.
--ai-provider openai)--openai-key <key>
: Set your OpenAI API key directly.
--openai-model <model>
: Choose the OpenAI model (default: "gpt-4o").
--openai-base-url <url>
: Set a custom base URL for OpenAI-compatible APIs (e.g., Deepseek, QwenAI, local LLMs).
: Examples:
: - https://api.deepseek.com/v1
: - https://api.qwen.ai/v1
: - http://localhost:8000/v1
--ai-provider gemini)--gemini-key <key>
: Set your Gemini API key directly.
--gemini-model <model>
: Set the Gemini model to use (default: "gemini-pro").
--ai-provider gemini-cli)This option uses a local gemini command-line tool, which must be installed and available in your system's PATH. The script will execute the gemini command, passing the prompt to its standard input. No API key is required for this provider option.
Tokens can also be provided via environment variables:
GITHUB_TOKEN=your_github_token
OPENAI_API_KEY=your_openai_api_key
The tool generates professional release notes in this format:
### 🚀 Features
- Enhanced user authentication system
- New dashboard analytics
### 🐛 Bug Fixes
- Fixed memory leak in background tasks
- Resolved login issues on Safari
### 🔧 Improvements
- Optimized database queries
- Updated dependencies
### Pull Requests
#123 - Add user authentication by [@username](https://github.com/username) (2024-02-01)
#124 - Fix memory leak by [@dev](https://github.com/dev) (2024-02-02)
MIT
FAQs
AI-powered GitHub release automation tool
We found that create-app-release demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.