Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
tag-release
Advanced tools
tag-release
You will be prompted for information regarding what type of update you are
making (major, minor, patch). Along the way, you'll have the opportunity to
verify, modify, or cancel the tag-release
process.
$ tag-release
? What is your GitHub username
? What is your GitHub password
? What type of release is this (Use arrow keys)
❯ Major (Breaking Change)
Minor (New Feature)
Patch (Bug Fix)
etc...
$ tag-release --help
$ tag-release -h
Usage: tag-release [options]
Options:
-h, --help Output usage information
-c, --config [filePath] Path to JSON Configuration file (defaults to './package.json')
-r, --release [type] Release type (major, minor, patch)
--verbose Console additional information
-V, --version output the version number
-p, --prerelease Create a pre-release
-i, --identifier <identifier> Identifier used for pre-release
--reset Reset repo to upstream master/develop branches
--promote [tag] Promotes specified pre-release tag to an offical release
--continue Continues the rebase process of a tag promotion
--qa [scope] Create initial upstream branch for upstream repo
--pr [scope] Update package.json to bump upstream repos and create a PR to develop
Examples:
$ tag-release
$ tag-release --config ../../config.json
$ tag-release -c ./manifest.json
$ tag-release --release major
$ tag-release -r minor
$ tag-release --verbose
$ tag-release -V
$ tag-release --version
$ tag-release --prerelease
$ tag-release -p
$ tag-release -p -i foo
$ tag-release --reset
$ tag-release --promote
$ tag-release --promote v1.1.1-my-tagged-version.0
$ tag-release --continue
$ tag-release --qa
$ tag-release --qa aoe
$ tag-release --pr
$ tag-release --pr aoe
Pre-releases are mainly for interim releases that are not intended for production use.
The benefit of this approach is being able to quickly deploy releases that can be easily
iterated upon. In order use this feature will you have to provide tag-release
with the
-p
or --prerelease
command-line flag. Afterwards, you will be prompted for a identifier
(or you can provide the identifier on the command-line) that will be used in the pre-release tag.
Then the flow will continue as normal release.
Notes: When using the pre-release feature you should have an upstream feature branch with the same name.
Usage:
$ tag-release -p
$ tag-release --prerelease
$ tag-release -p -i foo
Example:
$ tag-release -p
? Pre-release Identifier: foo
? What type of release is this (Use arrow keys)
❯ Pre-major (Breaking Change)
Pre-minor (New Feature)
Pre-patch (Bug Fix)
Pre-release (Bump existing Pre-release)
etc...
Using the -i
or -identifier
command-line option will allow you to pass over the step
asking for the "Pre-release Indentifier".
Example:
$ tag-release -p -i foo
? What type of release is this (Use arrow keys)
❯ Pre-major (Breaking Change)
Pre-minor (New Feature)
Pre-patch (Bug Fix)
Pre-release (Bump existing Pre-release)
etc...
These tags always match the following schema: [version]-[identifier].[bump]
Latest Release | Latest Prerelease | Release | Pre-release | Identifier | Next Version |
---|---|---|---|---|---|
1.2.3 | N/A | major | yes | pre (default) | 2.0.0-pre.0 |
1.2.3 | 2.0.0-pre.0 | major | yes | pre (default) | 2.0.0-pre.1 |
1.2.3 | 2.0.0-pre.1 | minor | no | N/A | 1.3.0 |
1.3.0 | 2.0.0-pre.1 | minor | yes | filter | 1.4.0-filter.0 |
This feature is use for promoting a pre-release to an offical release that is intended to go out
into production. In order use this feature will you have to provide tag-release
with the
--promote
as a command-line flag.
Usage:
$ tag-release --promote
Example:
$ tag-release --promote
? Select the pre-release you wish to promote: (Use arrow keys)
> v1.1.1-blah.0
v2.0.0-another.1
v3.0.0-this.5
After selecting the tag you wish to promote it will attempt remove all pre-release commits from history
and rebase it with master. If conflicts arise you will be promoted to fix the conflicts and then continue
with the promotion process by running tag-release --continue
. This cycle will continue until all conflicts
are resolve and then it will flow as a normal release from that point on.
The --promote
feature also allows for an optional command-line argument of a tag in the follow form:
Example:
$ tag-release --promote v1.1.1-feature.2
$ tag-release --promote 1.1.1-feature.2 # v is optional for tag
This will skip the selection process of a tag you wish to promote and it will flow the same flow as the
normal --promote
command-line argument above.
You will only be asked for your GitHub username and password when you first
start using tag-release
(and also authentication code if you have 2FA
enabled). It will generate an authorization token with GitHub and store that in
your global git configuration for later usage.
# get the configs
git config --global tag-release.username
git config --global tag-release.token
# edit the configs
git config --global --edit
# unset the configs
git config --global --unset tag-release.username
git config --global --unset tag-release.token
Using the --verbose
flag will output your username
and token
information.
$ tag-release -v
--- GitHub Configuration ------------------------------------------------------
username : johndoe
token : a92282731316b2d4f2313ff64b1350b78a5d4cf6
-------------------------------------------------------------------------------
? What type of release is this (Use arrow keys)
❯ Major (Breaking Change)
Minor (New Feature)
Patch (Bug Fix)
Note: Click the following items to reveal more information
FAQs
Automatically Tag and Release Repositories
The npm package tag-release receives a total of 98 weekly downloads. As such, tag-release popularity was classified as not popular.
We found that tag-release demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.