
Product
Rust Support Now in Beta
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
kzo-release-notes
Advanced tools
Generates KZO release notes automatically based on our GitHub conventions
It's pretty simple: install this package globally, then run it in the root of the repo you wish to generate release notes for. It will automatically figure out which repo it's in, pull all closed tickets for the milestone requested, and generate a PDF.
To start, install the application globally:
npm install kzo-release-notes -g
In order to generate release notes for private repositories, you'll need to supply a Github token. You can do this via environment variables:
$ GITHUB_TOKEN=XXXXX kzo-release-notes -m 5.13.1 -w
Or even easier is to just save the following line to your ~/.bashrc
/ ~/.zshrc
profile, so you never have to remember it again:export GITHUB_TOKEN="XXXXX"
kzo-release-notes --milestone 5.13.1 -w
$ kzo-release-notes --help
Usage: release-notes [options]
Options:
-h, --help output usage information
-m, --milestone <label> Milestone name (e.g.: 4.0.1)
-w, --write [filename] Converts to PDF and writes to disk instead of markdown => stdout (Default filename: Release-vMILESTONE.pdf)
-s, --status <closed|open> Show milestones where the status is open or closed. (Default: closed)
-r, --repo <reponame> Search milestones belonging to this repo (Defaults to lookup of origin server in current git repo)
-u, --user <username> Specify User or Org repo belongs to (defaults to lookup of origin server in current git repo)
-t, --template <template> Location of mustache template file
FAQs
Automatically create release notes based on github milestones and labels
We found that kzo-release-notes demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
Product
Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.