git-commit-template - npm Package Compare versions

Comparing version 1.0.2 to 1.0.4

.github/workflows/changelog.yml

+name: changelog
+
+on:
+  pull_request:
+    types: [closed]
+
+  release:
+    types: [created]
+
+  issues:
+    types: [closed, edited]
+
+jobs:
+  generate_changelog:
+    runs-on: ubuntu-latest
+    name: Generate changelog for master branch
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Generate changelog
+        uses: charmixer/auto-changelog-action@v1
+
+      - name: Commit files
+        env:
+          CI_USER: "CHANGELOG Bot"
+          CI_EMAIL: "[e-mail]"
+        run: |
+          git config --local user.email "$CI_EMAIL"
+          git config --local user.name "$CI_USER"
+          git add CHANGELOG.md
+          git commit -m '[BOT] 🤖 Updated CHANGELOG.md' && echo ::set-env name=push::1 || echo "No changes to CHANGELOG.md"
+
+      - name: Push changes
+        # This will be true if we are able to commit changes
+        if: env.push == 1
+        #env:
+          # Do we need this again or it picks from top
+          #CI_USER: "CHANGELOG Bot"
+          #CI_EMAIL: "[e-mail]"
+        run: |
+          git push origin HEAD:master

CHANGELOG.md

+# Changelog
+
+## [Unreleased](https://github.com/amzn/git-commit-template/tree/HEAD)
+
+[Full Changelog](https://github.com/amzn/git-commit-template/compare/v1.0.2...HEAD)
+
+**Closed issues:**
+
+- Generate changelog for changes published [\#11](https://github.com/amzn/git-commit-template/issues/11)
+
+**Merged pull requests:**
+
+- \[FEATURE\] Adds action to generate changelog [\#12](https://github.com/amzn/git-commit-template/pull/12) ([anshulguleria](https://github.com/anshulguleria))
+- \[BUG\] Updates dependencies for security fixes [\#10](https://github.com/amzn/git-commit-template/pull/10) ([anshulguleria](https://github.com/anshulguleria))
+
+## [v1.0.2](https://github.com/amzn/git-commit-template/tree/v1.0.2) (2020-04-03)
+
+[Full Changelog](https://github.com/amzn/git-commit-template/compare/v1.0.1...v1.0.2)
+
+**Merged pull requests:**
+
+- \[CHORE\] Updates action name and docs for setup [\#9](https://github.com/amzn/git-commit-template/pull/9) ([anshulguleria](https://github.com/anshulguleria))
+
+## [v1.0.1](https://github.com/amzn/git-commit-template/tree/v1.0.1) (2020-04-03)
+
+[Full Changelog](https://github.com/amzn/git-commit-template/compare/26e4df7b5d03f890e29c0b8634a39ce86da9ce38...v1.0.1)
+
+**Merged pull requests:**
+
+- \[CHORE\] Fixes issue with gpr publish [\#8](https://github.com/amzn/git-commit-template/pull/8) ([anshulguleria](https://github.com/anshulguleria))
+- Bump mixin-deep from 1.3.1 to 1.3.2 [\#7](https://github.com/amzn/git-commit-template/pull/7) ([dependabot[bot]](https://github.com/apps/dependabot))
+- Bump acorn from 6.1.1 to 6.4.1 [\#6](https://github.com/amzn/git-commit-template/pull/6) ([dependabot[bot]](https://github.com/apps/dependabot))
+- Bump lodash from 4.17.11 to 4.17.15 [\#4](https://github.com/amzn/git-commit-template/pull/4) ([dependabot[bot]](https://github.com/apps/dependabot))
+- Bump eslint-utils from 1.3.1 to 1.4.2 [\#3](https://github.com/amzn/git-commit-template/pull/3) ([dependabot[bot]](https://github.com/apps/dependabot))
+- \[CHORE\] Updates package publish name [\#2](https://github.com/amzn/git-commit-template/pull/2) ([anshulguleria](https://github.com/anshulguleria))
+- \[FEATURE\] Adds code for setting commit template [\#1](https://github.com/amzn/git-commit-template/pull/1) ([anshulguleria](https://github.com/anshulguleria))
+
+
+
+\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)*

lint-staged.config.js

 // Since this module is set to use es6 thus module is giving error. Thus
 // defining module as global before hand
 module.exports = {
-  linters: {
-    "*.{js,json,md}": [
-      "npm run lint:files",
-      // Assuming prettier doesn't add any linting issues
-      "prettier --write",
-      // Checking if anything broke because of prettier
-      "npm run lint:files",
-      "git add",
-    ],
-  },
+  "*.{js,json,md}": [
+    "npm run lint:files",
+    // Assuming prettier doesn't add any linting issues
+    "prettier --write",
+    // Checking if anything broke because of prettier
+    "npm run lint:files",
+  ],
 };

package.json

 {
   "name": "git-commit-template",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Set commit template for git packages",
@@ -28,8 +28,8 @@ "bin": {
   "devDependencies": {
-    "eslint": "^5.16.0",
-    "eslint-plugin-json": "^1.4.0",
+    "eslint": "^7.2.0",
+    "eslint-plugin-json": "^2.1.1",
     "husky": "^2.3.0",
-    "lint-staged": "^8.1.6",
+    "lint-staged": "^10.2.9",
     "prettier": "^1.17.1"
   }
 }

README.md

@@ -5,2 +5,3 @@ # git-commit-template
 publish](https://github.com/amzn/git-commit-template/workflows/publish/badge.svg)
+![changelog](https://github.com/amzn/git-commit-template/workflows/changelog/badge.svg)
 
@@ -7,0 +8,0 @@ Sets commit template for your git projects. This is a husky plugin which should

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

29515

13.75%

Number of package files

19

11.76%

Number of lines in readme file

66

1.54%

Worsened metrics

Lines of code

112

-2.61%

No dependency changes