
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
ustream-grunt-release
Advanced tools
Grunt plugin for automating all the release steps of your node lib or bower component, with optional publishing to npm.
Releasing a new version of your killer Node/Bower/Component/JS lib looks something like this:
package.json
file.Cool, right? No! What's wrong with you? Automate all that:
grunt release
Done. No more GitHub issues from angry people reminding you how often you forget to do one or more of the steps.
If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install ustream-grunt-release --save-dev
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('ustream-grunt-release');
Patch Release:
grunt release
or
grunt release:patch
Minor Release:
grunt release:minor
Major Release:
grunt release:major
Specific Version Release:
grunt release:1.2.3
Pre-release
grunt release:prerelease
prerelease
will just update the number after MAJOR.MINOR.PATCH
(eg: 1.0.0-1
)
If you want to add an alphanumeric identifier, you will need to add it by hand.
Example: add -alpha.0
to get something like 1.0.0-alpha.0
. Calling grunt release:prerelease
will just update the last number to 1.0.0-alpha.1
.
Releasing Unstable/Beta Versions
Sometimes it is useful to publish an 'unstable' or 'beta' version to npm
, while leaving your last stable release as the default that gets installed on an npm install
.
npm
accomplishes this using the --tag myUnstableVersion
flag. You can enable this flag in grunt-release either by setting the npmtag
option:
release: {
options: {
npmtag: 'canary',
}
}
or by passing the CLI arg:
grunt release --npmtag canary
NOTE: If the tag you pass is true, then the tag will be the new version number after the bump. Otherwise it will be the string you provided.
Bump multiple files at once
Sometimes you may need to bump multiple files while releasing.
release: {
options: {
additionalFiles: ['bower.json']
}
}
You can also provide multiple files in this array or provide a string with multiple file paths separated by comma (,
).
The version to bump is set in the master file defined with option 'file' (default : package.json). This version will be propagated to every additionalFiles.
Dry Run:
To see what grunt-release does, without really changing anything, use --no-write
option.
grunt release --no-write
You'll see something like:
>> Release dry run
>> bumped version to 0.8.0
>> staged package.json
>> committed package.json
>> created new git tag: 0.8.0
>> pushed to remote git repo
>> pushed new tag 0.8.0 to remote git repo
>> published version 0.8.0 to npm
>> created 0.8.0 release on github.
Done, without errors.
The following are all the release steps, you can disable any you need to:
release: {
options: {
silent: false, //default: true
bump: false, //default: true
changelog: true, //default: false
changelogText: '<%= version %>\n', //default: '### <%= version %> - <%= grunt.template.today("yyyy-mm-dd") %>\n'
file: 'component.json', //default: package.json
add: false, //default: true
commit: false, //default: true
tag: false, //default: true
push: false, //default: true
pushTags: false, //default: true
npm: false, //default: true
npmtag: true, //default: no tag
indentation: '\t', //default: ' ' (two spaces)
folder: 'folder/to/publish/to/npm', //default project root
tagName: 'some-tag-<%= version %>', //default: '<%= version %>'
commitMessage: 'check out my release <%= version %>', //default: 'release <%= version %>'
tagMessage: 'tagging version <%= version %>', //default: 'Version <%= version %>',
beforeBump: [], // optional grunt tasks to run before file versions are bumped
afterBump: [], // optional grunt tasks to run after file versions are bumped
beforeRelease: [], // optional grunt tasks to run after release version is bumped up but before release is packaged
afterRelease: [], // optional grunt tasks to run after release is packaged
updateVars: [], // optional grunt config objects to update (this will update/set the version property on the object specified)
github: {
apiRoot: 'https://git.example.com/v3', // Default: https://github.com
repo: 'geddski/grunt-release', //put your user/repo here
accessTokenVar: 'GITHUB_ACCESS_TOKE', //ENVIRONMENT VARIABLE that contains GitHub Access Token
// Or you can use username and password env variables, we discourage you to do so
usernameVar: 'GITHUB_USERNAME', //ENVIRONMENT VARIABLE that contains GitHub username
passwordVar: 'GITHUB_PASSWORD' //ENVIRONMENT VARIABLE that contains GitHub password
}
}
}
If you want to use multiline commit messages just pass an array to the commitMessage
option instead of a string.
MIT
FAQs
Release a new version of your Node-based project
We found that ustream-grunt-release demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.