
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
fastlane-plugin-semantic_versioning
Advanced tools
This project is a fastlane plugin. To get started with fastlane-plugin-semantic_versioning, add it to your project by running:
fastlane add_plugin semantic_versioning
Version and changelog management following semantic versioning and conventional commits.
The plugin provides two actions that have to be called in sequence, but therefore allow additional interaction with the results before an actual commit is being made.
One example could be to get the version info for the upcoming release, and when this is
successful, i.e. a version bump is possible, create a release branch with that version number and
change to that branch before making any changes. Then call the semantic_bump action to create the commit on the release branch, before you may want to create a pull request for the new release.
Hint: You can also use the context to upload the changelog to AppStoreConnect afterwards. See the example Fastfile for more info.
Call this in your lane to prepare a bump according to the rules. It will
and provide this information in shared variables that are used in the second action.
Call this to actually bump the version, write the changelog and commit everything.
Check out the example Fastfile to see how to use this plugin. Try it by cloning the repo, running fastlane install_plugins and bundle exec fastlane test.
To run both the tests, and code style validation, run
bundle exec rake
To automatically fix many of the styling issues, use
bundle exec rubocop -a
Or to start fast feedback development cycle:
bundle exec guard
For any other issues and feedback about this plugin, please submit it to this repository.
If you have trouble using plugins, check out the Plugins Troubleshooting guide.
For more information about how the fastlane plugin system works, check out the Plugins documentation.
fastlane is the easiest way to automate beta deployments and releases for your iOS and Android apps. To learn more, check out fastlane.tools.
FAQs
Unknown package
We found that fastlane-plugin-semantic_versioning demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.