跳到主要内容
知仓学习社ZHICANG

changelog-generator

Produce consistent, auditable release notes from Conventional Commits. Separates commit parsing, semantic-bump logic, and changelog rendering for au…

执行命令读文件写文件联网严重 0 · 高危 2alirezarezvani/claude-skills

它会碰到什么

扫了多少10 个文本文件,63 KB
它会碰到什么执行命令读文件写文件联网
命中总数9 处
命中统计严重 0 · 高 2 · 中 2 · 低 0
逐条看命中(2 条严重或高危)
  • scripts/commit_linter.py:69exec-spawn
    proc = subprocess.run(
  • scripts/generate_changelog.py:105exec-spawn
    proc = subprocess.run(

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Changelog Generator

Tier: POWERFUL

Category: Engineering

Domain: Release Management / Documentation

Overview

Use this skill to produce consistent, auditable release notes from Conventional Commits. It separates commit parsing, semantic bump logic, and changelog rendering so teams can automate releases without losing editorial control.

Core Capabilities

  • Parse commit messages using Conventional Commit rules
  • Detect semantic bump (major, minor, patch) from commit stream
  • Render Keep a Changelog sections (Added, Changed, Fixed, etc.)
  • Generate release entries from git ranges or provided commit input
  • Enforce commit format with a dedicated linter script
  • Support CI integration via machine-readable JSON output

When to Use

  • Before publishing a release tag
  • During CI to generate release notes automatically
  • During PR checks to block invalid commit message formats
  • In monorepos where package changelogs require scoped filtering
  • When converting raw git history into user-facing notes

Key Workflows

1. Generate Changelog Entry From Git

python3 scripts/generate_changelog.py \
  --from-tag v1.3.0 \
  --to-tag v1.4.0 \
  --next-version v1.4.0 \
  --format markdown

2. Generate Entry From stdin/File Input

git log v1.3.0..v1.4.0 --pretty=format:'%s' | \
  python3 scripts/generate_changelog.py --next-version v1.4.0 --format markdown

python3 scripts/generate_changelog.py --input commits.txt --next-version v1.4.0 --format json

3. Update CHANGELOG.md

python3 scripts/generate_changelog.py \
  --from-tag v1.3.0 \
  --to-tag HEAD \
  --next-version v1.4.0 \
  --write CHANGELOG.md

4. Compute the Next Version From Commits

When the user has not decided the next version, derive it instead of guessing:

git log v1.3.0..HEAD --oneline | \
  python3 scripts/version_bumper.py --current-version 1.3.0 --output-format json

Output JSON contains recommended_version, bump_type (major/minor/patch/none), and with --include-commands the exact git tag commands. Feed recommended_version into generate_changelog.py --next-version. Pre-releases: add --prerelease alpha|beta|rc. Input must be real git log --oneline output (hex hashes); a sample lives at assets/sample_git_log.txt.

5. Lint Commits Before Merge

python3 scripts/commit_linter.py --from-ref origin/main --to-ref HEAD --strict --format text

Or file/stdin:

python3 scripts/commit_linter.py --input commits.txt --strict
cat commits.txt | python3 scripts/commit_linter.py --format json

Conventional Commit Rules

Supported types:

  • feat, fix, perf, refactor, docs, test, build, ci, chore
  • security, deprecated, remove

Breaking changes:

  • type(scope)!: summary
  • Footer/body includes BREAKING CHANGE:

SemVer mapping:

  • breaking -> major
  • non-breaking feat -> minor
  • all others -> patch

Script Interfaces

  • python3 scripts/generate_changelog.py --help
  • Reads commits from git or stdin/--input
  • Renders markdown or JSON
  • Optional in-place changelog prepend
  • python3 scripts/commit_linter.py --help
  • Validates commit format
  • Returns non-zero in --strict mode on violations

Common Pitfalls

  1. Mixing merge commit messages with release commit parsing
  2. Using vague commit summaries that cannot become release notes
  3. Failing to include migration guidance for breaking changes
  4. Treating docs/chore changes as user-facing features
  5. Overwriting historical changelog sections instead of prepending

Best Practices

  1. Keep commits small and intent-driven.
  2. Scope commit messages (feat(api): ...) in multi-package repos.
  3. Enforce linter checks in PR pipelines.
  4. Review generated markdown before publishing.
  5. Tag releases only after changelog generation succeeds.
  6. Keep an [Unreleased] section for manual curation when needed.

Hotfix Severity & SLAs

When a release goes wrong, classify before acting (full procedures in [references/hotfix-procedures.md](references/hotfix-procedures.md)):

| Severity | Definition | SLA | Approval |

|---|---|---|---|

| P0 — Critical | Outage, data loss, exploited vulnerability | Fix deployed ≤ 2h; emergency deploy bypasses normal gates | Engineering Lead + On-call Manager |

| P1 — High | Major feature broken, significant user impact | Fix deployed ≤ 24h; expedited review | Engineering Lead + Product Manager |

| P2 — Medium | Minor issues, limited impact | Next release cycle | Standard PR review |

Hotfix branch comes from the last stable tag, contains the minimal fix only, and gets its own patch-bump changelog entry via the workflow above.

Rollback Triggers

Pre-commit to these thresholds before tagging; roll back when any fires:

| Trigger | Threshold |

|---|---|

| Error rate spike | > 2x baseline within 30 min |

| Performance degradation | > 50% latency increase |

| Feature failure | Core functionality broken |

| Security incident | Vulnerability being exploited |

| Data corruption | Database integrity compromised |

Prefer feature-flag disable over code rollback; database rollbacks only for non-destructive migrations (forward-only migrations preferred). See [references/hotfix-procedures.md](references/hotfix-procedures.md).

References

  • [references/ci-integration.md](references/ci-integration.md)
  • [references/changelog-formatting-guide.md](references/changelog-formatting-guide.md)
  • [references/monorepo-strategy.md](references/monorepo-strategy.md)
  • [references/hotfix-procedures.md](references/hotfix-procedures.md)
  • [README.md](README.md)

Release Governance

Use this release flow for predictability:

  1. Lint commit history for target release range.
  2. Generate changelog draft from commits.
  3. Manually adjust wording for customer clarity.
  4. Validate semver bump recommendation.
  5. Tag release only after changelog is approved.

Output Quality Checks

  • Each bullet is user-meaningful, not implementation noise.
  • Breaking changes include migration action.
  • Security fixes are isolated in Security section.
  • Sections with no entries are omitted.
  • Duplicate bullets across sections are removed.

CI Policy

  • Run commit_linter.py --strict on all PRs.
  • Block merge on invalid conventional commits.
  • Auto-generate draft release notes on tag push.
  • Require human approval before writing into CHANGELOG.md on main branch.

Monorepo Guidance

  • Prefer commit scopes aligned to package names.
  • Filter commit stream by scope for package-specific releases.
  • Keep infra-wide changes in root changelog.
  • Store package changelogs near package roots for ownership clarity.

Failure Handling

  • If no valid conventional commits found: fail early, do not generate misleading empty notes.
  • If git range invalid: surface explicit range in error output.
  • If write target missing: create safe changelog header scaffolding.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

它属于哪个仓库

星标★ 26,030
本站分层T1
该仓技能数846
原文件路径engineering/skills/changelog-generator/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 846 个技能

同名技能的其他版本

有 2 个不同仓库或目录里都有叫 changelog-generator 的技能。它们内容并不相同,别混用: