@hyperfrontend/versioning 0.2.0 → 0.3.0

package/flow/steps/index.d.ts

@@ -2,7 +2,7 @@ export { FETCH_REGISTRY_STEP_ID, createFetchRegistryStep } from './fetch-registr
 export { RESOLVE_REPOSITORY_STEP_ID, createResolveRepositoryStep } from './resolve-repository';
 export { ANALYZE_COMMITS_STEP_ID, createAnalyzeCommitsStep } from './analyze-commits';
 export { CALCULATE_BUMP_STEP_ID, createCalculateBumpStep, createCheckIdempotencyStep } from './calculate-bump';
-export { GENERATE_CHANGELOG_STEP_ID, createGenerateChangelogStep, createWriteChangelogStep } from './generate-changelog';
+export { DEFAULT_COMMIT_TYPE_TO_SECTION, GENERATE_CHANGELOG_STEP_ID, createGenerateChangelogStep, createWriteChangelogStep, } from './generate-changelog';
 export { UPDATE_PACKAGES_STEP_ID, createUpdatePackageStep, createCascadeDependenciesStep } from './update-packages';
 export { CREATE_COMMIT_STEP_ID, createGitCommitStep } from './create-commit';
 export { CREATE_TAG_STEP_ID, createTagStep, createPushTagStep } from './create-tag';

package/flow/steps/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/versioning/src/flow/steps/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAClF,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAA;AAC9F,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAC9G,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AACxH,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAA;AACnH,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/versioning/src/flow/steps/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAClF,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAA;AAC9F,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAC9G,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAA;AACnH,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA"}

package/flow/steps/index.esm.js

@@ -2310,12 +2310,12 @@ function shouldPreserveScope(source) {
  * // Returns: ['app-demo', 'demo']
  */
 function deriveProjectScopes(options) {
-    const { projectName, packageName, additionalScopes = [] } = options;
+    const { projectName, packageName, additionalScopes = [], prefixes = DEFAULT_PROJECT_PREFIXES } = options;
     const scopes = createSet();
     // Always include the full project name
     scopes.add(projectName);
     // Add variations based on common prefixes
-    const prefixVariations = extractPrefixVariations(projectName);
+    const prefixVariations = extractPrefixVariations(projectName, prefixes);
     for (const variation of prefixVariations) {
         scopes.add(variation);
     }
@@ -2335,18 +2335,19 @@ function deriveProjectScopes(options) {
     return [...scopes];
 }
 /**
- * Recognized project name prefixes that can be stripped for scope matching.
+ * Default project name prefixes that can be stripped for scope matching.
  */
-const PROJECT_PREFIXES = ['lib-', 'app-', 'e2e-', 'tool-', 'plugin-', 'feature-', 'package-'];
+const DEFAULT_PROJECT_PREFIXES = ['lib-', 'app-', 'e2e-', 'tool-', 'plugin-', 'feature-', 'package-'];
 /**
  * Generates scope variations by stripping recognized project prefixes.
  *
  * @param projectName - The project name to extract variations from
+ * @param prefixes - Prefixes to check and strip
  * @returns Array of scope name variations
  */
-function extractPrefixVariations(projectName) {
+function extractPrefixVariations(projectName, prefixes) {
     const variations = [];
-    for (const prefix of PROJECT_PREFIXES) {
+    for (const prefix of prefixes) {
         if (projectName.startsWith(prefix)) {
             const withoutPrefix = projectName.slice(prefix.length);
             if (withoutPrefix) {
@@ -3190,6 +3191,10 @@ function splitLines(message) {
     return lines;
 }
 
+/**
+ * Default changelog filename.
+ */
+const DEFAULT_CHANGELOG_FILENAME = 'CHANGELOG.md';
 /**
  * Default scope filtering configuration.
  *
@@ -3201,6 +3206,7 @@ const DEFAULT_SCOPE_FILTERING_CONFIG = {
     includeScopes: [],
     excludeScopes: DEFAULT_EXCLUDE_SCOPES,
     trackDependencyChanges: false,
+    projectPrefixes: DEFAULT_PROJECT_PREFIXES,
     infrastructure: undefined,
     infrastructureMatcher: undefined,
 };
@@ -3227,6 +3233,7 @@ const ANALYZE_COMMITS_STEP_ID = 'analyze-commits';
 function createAnalyzeCommitsStep() {
     return createStep(ANALYZE_COMMITS_STEP_ID, 'Analyze Commits', async (ctx) => {
         const { git, projectName, projectRoot, packageName, workspaceRoot, config, logger, state } = ctx;
+        const maxFallback = config.maxCommitFallback ?? 500;
         // Use publishedCommit from registry (set by fetch-registry step)
         const { publishedCommit, isFirstRelease } = state;
         let rawCommits;
@@ -3243,13 +3250,13 @@ function createAnalyzeCommitsStep() {
                 logger.warn(`Published commit ${publishedCommit.slice(0, 7)} not found in history. ` +
                     `This may indicate a rebase or force push occurred after publishing v${state.publishedVersion}. ` +
                     `Falling back to recent commit analysis.`);
-                rawCommits = git.getCommitLog({ maxCount: 100 });
+                rawCommits = git.getCommitLog({ maxCount: maxFallback });
                 // effectiveBaseCommit stays null - no compare URL will be generated
             }
         }
         else {
             // First release or no published version
-            rawCommits = git.getCommitLog({ maxCount: 100 });
+            rawCommits = git.getCommitLog({ maxCount: maxFallback });
             logger.debug(`First release - analyzing up to ${rawCommits.length} commits`);
         }
         // Get scope filtering configuration
@@ -3291,7 +3298,7 @@ function createAnalyzeCommitsStep() {
             const relativePath = getRelativePath(workspaceRoot, projectRoot);
             const pathFilteredCommits = effectiveBaseCommit
                 ? git.getCommitsSince(effectiveBaseCommit, { path: relativePath })
-                : git.getCommitLog({ maxCount: 100, path: relativePath });
+                : git.getCommitLog({ maxCount: maxFallback, path: relativePath });
             fileCommitHashes = createSet(pathFilteredCommits.map((c) => c.hash));
             logger.debug(`Found ${fileCommitHashes.size} commits touching ${relativePath}`);
         }
@@ -3300,14 +3307,15 @@ function createAnalyzeCommitsStep() {
             projectName,
             packageName,
             additionalScopes: scopeFilteringConfig.includeScopes,
+            prefixes: scopeFilteringConfig.projectPrefixes,
         });
         logger.debug(`Project scopes: ${projectScopes.join(', ')}`);
         // Build infrastructure commit hashes for file-based infrastructure detection
-        const infrastructureCommitHashes = buildInfrastructureCommitHashes(git, effectiveBaseCommit, rawCommits, parsedCommits, scopeFilteringConfig, logger);
+        const infrastructureCommitHashes = buildInfrastructureCommitHashes(git, effectiveBaseCommit, rawCommits, parsedCommits, scopeFilteringConfig, logger, maxFallback);
         // Build dependency commit map if tracking is enabled (Phase 4)
         let dependencyCommitMap;
         if (scopeFilteringConfig.trackDependencyChanges) {
-            dependencyCommitMap = buildDependencyCommitMap(git, workspaceRoot, projectName, effectiveBaseCommit, logger);
+            dependencyCommitMap = buildDependencyCommitMap(git, workspaceRoot, projectName, effectiveBaseCommit, logger, maxFallback);
         }
         // Create classification context
         const classificationContext = createClassificationContext(projectScopes, fileCommitHashes, {
@@ -3440,9 +3448,10 @@ function buildSummaryMessage(includedCount, totalCount, summary, strategy) {
  * @param config - Scope filtering configuration
  * @param logger - Logger with debug method for output
  * @param logger.debug - Debug logging function
+ * @param maxFallback - Maximum commits to query when baseCommit is null
  * @returns Set of commit hashes classified as infrastructure
  */
-function buildInfrastructureCommitHashes(git, baseCommit, rawCommits, parsedCommits, config, logger) {
+function buildInfrastructureCommitHashes(git, baseCommit, rawCommits, parsedCommits, config, logger, maxFallback) {
     // Collect all infrastructure commit hashes
     let infraHashes = createSet();
     // Method 1: Path-based detection (query git for commits touching infra paths)
@@ -3451,7 +3460,7 @@ function buildInfrastructureCommitHashes(git, baseCommit, rawCommits, parsedComm
         for (const infraPath of infraPaths) {
             const pathCommits = baseCommit
                 ? git.getCommitsSince(baseCommit, { path: infraPath })
-                : git.getCommitLog({ maxCount: 100, path: infraPath });
+                : git.getCommitLog({ maxCount: maxFallback, path: infraPath });
             for (const commit of pathCommits) {
                 infraHashes = infraHashes.add(commit.hash);
             }
@@ -3519,9 +3528,10 @@ function combineMatcher(a, b) {
  * @param baseCommit - Base commit hash for commit range (null for first release/fallback)
  * @param logger - Logger with debug method for output
  * @param logger.debug - Debug logging function
+ * @param maxFallback - Maximum commits to query when baseCommit is null
  * @returns Map of dependency names to commit hashes touching that dependency
  */
-function buildDependencyCommitMap(git, workspaceRoot, projectName, baseCommit, logger) {
+function buildDependencyCommitMap(git, workspaceRoot, projectName, baseCommit, logger, maxFallback) {
     let dependencyMap = createMap();
     try {
         // Discover all projects in workspace using lib-project-scope
@@ -3546,7 +3556,7 @@ function buildDependencyCommitMap(git, workspaceRoot, projectName, baseCommit, l
             // Query git for commits touching this dependency's path
             const depCommits = baseCommit
                 ? git.getCommitsSince(baseCommit, { path: depRoot })
-                : git.getCommitLog({ maxCount: 100, path: depRoot });
+                : git.getCommitLog({ maxCount: maxFallback, path: depRoot });
             if (depCommits.length > 0) {
                 const hashSet = createSet(depCommits.map((c) => c.hash));
                 dependencyMap = dependencyMap.set(dep.target, hashSet);
@@ -5213,11 +5223,22 @@ function isWhitespace(char) {
 }
 
 /**
- * Changelog Parser
+ * Validates that a URL is actually a GitHub URL by parsing it properly.
+ * This prevents SSRF attacks where 'github.com' could appear in path/query.
  *
- * Parses a changelog markdown string into a structured Changelog object.
- * Uses a state machine tokenizer for ReDoS-safe parsing.
+ * @param url - The URL string to validate
+ * @returns True if the URL host is github.com or a subdomain
  */
+function isGitHubUrl(url) {
+    try {
+        const parsed = createURL(url);
+        // Check that the host is exactly github.com or ends with .github.com
+        return parsed.host === 'github.com' || parsed.host.endsWith('.github.com');
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Parses a changelog markdown string into a Changelog object.
  *
@@ -5285,7 +5306,7 @@ function parseHeader(state) {
                 description.push(`[${token.value}](${nextToken.value})`);
                 links.push({ label: token.value, url: nextToken.value });
                 // Try to detect repository URL
-                if (!state.repositoryUrl && nextToken.value.includes('github.com')) {
+                if (!state.repositoryUrl && isGitHubUrl(nextToken.value)) {
                     state.repositoryUrl = extractRepoUrl(nextToken.value);
                 }
                 advance(state); // skip link-text
@@ -6087,7 +6108,7 @@ const GENERATE_CHANGELOG_STEP_ID = 'generate-changelog';
 /**
  * Maps conventional commit types to changelog section types.
  */
-const COMMIT_TYPE_TO_SECTION = {
+const DEFAULT_COMMIT_TYPE_TO_SECTION = {
     feat: 'features',
     fix: 'fixes',
     perf: 'performance',
@@ -6100,6 +6121,18 @@ const COMMIT_TYPE_TO_SECTION = {
     chore: 'chores',
     style: 'other',
 };
+/**
+ * Resolves the commit type to section mapping by merging config with defaults.
+ *
+ * @param configMapping - User-provided partial mapping from FlowConfig
+ * @returns Resolved mapping with user overrides applied
+ */
+function resolveCommitTypeMapping(configMapping) {
+    if (!configMapping) {
+        return DEFAULT_COMMIT_TYPE_TO_SECTION;
+    }
+    return { ...DEFAULT_COMMIT_TYPE_TO_SECTION, ...configMapping };
+}
 /**
  * Checks if a commit source represents an indirect change.
  *
@@ -6113,16 +6146,22 @@ function isIndirectSource(source) {
  * Groups classified commits by their section type.
  *
  * @param commits - Array of classified commits
+ * @param mapping - Commit type to section mapping
  * @returns Record of section type to classified commits
  */
-function groupClassifiedCommitsBySection(commits) {
+function groupClassifiedCommitsBySection(commits, mapping) {
     const groups = {};
     for (const classified of commits) {
-        const sectionType = COMMIT_TYPE_TO_SECTION[classified.commit.type ?? 'chore'] ?? 'chores';
-        if (!groups[sectionType]) {
-            groups[sectionType] = [];
+        const sectionType = mapping[classified.commit.type ?? 'chore'];
+        // Skip if explicitly excluded (null)
+        if (sectionType === null)
+            continue;
+        // Fallback to 'chores' for unmapped types
+        const resolvedSection = sectionType ?? 'chores';
+        if (!groups[resolvedSection]) {
+            groups[resolvedSection] = [];
         }
-        groups[sectionType].push(classified);
+        groups[resolvedSection].push(classified);
     }
     return groups;
 }
@@ -6130,16 +6169,22 @@ function groupClassifiedCommitsBySection(commits) {
  * Groups commits by their section type.
  *
  * @param commits - Array of conventional commits
+ * @param mapping - Commit type to section mapping
  * @returns Record of section type to commits
  */
-function groupCommitsBySection(commits) {
+function groupCommitsBySection(commits, mapping) {
     const groups = {};
     for (const commit of commits) {
-        const sectionType = COMMIT_TYPE_TO_SECTION[commit.type ?? 'chore'] ?? 'chores';
-        if (!groups[sectionType]) {
-            groups[sectionType] = [];
+        const sectionType = mapping[commit.type ?? 'chore'];
+        // Skip if explicitly excluded (null)
+        if (sectionType === null)
+            continue;
+        // Fallback to 'chores' for unmapped types
+        const resolvedSection = sectionType ?? 'chores';
+        if (!groups[resolvedSection]) {
+            groups[resolvedSection] = [];
         }
-        groups[sectionType].push(commit);
+        groups[resolvedSection].push(commit);
     }
     return groups;
 }
@@ -6207,6 +6252,8 @@ function createGenerateChangelogStep() {
     return createStep(GENERATE_CHANGELOG_STEP_ID, 'Generate Changelog Entry', async (ctx) => {
         const { config, state } = ctx;
         const { commits, nextVersion, bumpType } = state;
+        // Resolve commit type to section mapping
+        const commitTypeMapping = resolveCommitTypeMapping(config.commitTypeToSection);
         // Skip if no bump needed
         if (!nextVersion || bumpType === 'none') {
             return createSkippedResult('No version bump, skipping changelog generation');
@@ -6268,7 +6315,7 @@ function createGenerateChangelogStep() {
                 })));
             }
             // Group direct commits by section
-            const groupedDirect = groupClassifiedCommitsBySection(directCommits);
+            const groupedDirect = groupClassifiedCommitsBySection(directCommits, commitTypeMapping);
             // Add other sections in conventional order (direct commits only)
             const sectionOrder = [
                 { type: 'features', heading: 'Features' },
@@ -6296,7 +6343,7 @@ function createGenerateChangelogStep() {
         }
         else {
             // Fallback: use commits without classification (backward compatibility)
-            const grouped = groupCommitsBySection(commits);
+            const grouped = groupCommitsBySection(commits, commitTypeMapping);
             // Add breaking changes section first if any
             const breakingCommits = commits.filter((c) => c.breaking);
             if (breakingCommits.length > 0) {
@@ -6372,14 +6419,15 @@ function createWriteChangelogStep() {
         if (!nextVersion || bumpType === 'none' || !changelogEntry || config.skipChangelog) {
             return createSkippedResult('No changelog to write');
         }
-        const changelogPath = `${projectRoot}/CHANGELOG.md`;
+        const changelogFileName = config.changelogFileName ?? DEFAULT_CHANGELOG_FILENAME;
+        const changelogPath = `${projectRoot}/${changelogFileName}`;
         let existingContent = '';
         // Read existing changelog
         try {
             existingContent = tree.read(changelogPath, 'utf-8') ?? '';
         }
         catch {
-            logger.debug('No existing CHANGELOG.md found');
+            logger.debug(`No existing ${changelogFileName} found`);
         }
         // If no existing content, create new changelog
         if (!existingContent.trim()) {
@@ -6397,7 +6445,7 @@ function createWriteChangelogStep() {
                 stateUpdates: {
                     modifiedFiles: [...(state.modifiedFiles ?? []), changelogPath],
                 },
-                message: `Created CHANGELOG.md with version ${nextVersion}`,
+                message: `Created ${changelogFileName} with version ${nextVersion}`,
             };
         }
         // Parse existing and add entry
@@ -6431,7 +6479,7 @@ function createWriteChangelogStep() {
             stateUpdates: {
                 modifiedFiles: [...(state.modifiedFiles ?? []), changelogPath],
             },
-            message: `Updated CHANGELOG.md with version ${nextVersion}`,
+            message: `Updated ${changelogFileName} with version ${nextVersion}`,
         };
     }, {
         dependsOn: ['generate-changelog'],
@@ -6784,5 +6832,5 @@ function createPushTagStep() {
     });
 }
 
-export { ANALYZE_COMMITS_STEP_ID, CALCULATE_BUMP_STEP_ID, CREATE_COMMIT_STEP_ID, CREATE_TAG_STEP_ID, FETCH_REGISTRY_STEP_ID, GENERATE_CHANGELOG_STEP_ID, RESOLVE_REPOSITORY_STEP_ID, UPDATE_PACKAGES_STEP_ID, createAnalyzeCommitsStep, createCalculateBumpStep, createCascadeDependenciesStep, createCheckIdempotencyStep, createFetchRegistryStep, createGenerateChangelogStep, createGitCommitStep, createPushTagStep, createResolveRepositoryStep, createTagStep, createUpdatePackageStep, createWriteChangelogStep };
+export { ANALYZE_COMMITS_STEP_ID, CALCULATE_BUMP_STEP_ID, CREATE_COMMIT_STEP_ID, CREATE_TAG_STEP_ID, DEFAULT_COMMIT_TYPE_TO_SECTION, FETCH_REGISTRY_STEP_ID, GENERATE_CHANGELOG_STEP_ID, RESOLVE_REPOSITORY_STEP_ID, UPDATE_PACKAGES_STEP_ID, createAnalyzeCommitsStep, createCalculateBumpStep, createCascadeDependenciesStep, createCheckIdempotencyStep, createFetchRegistryStep, createGenerateChangelogStep, createGitCommitStep, createPushTagStep, createResolveRepositoryStep, createTagStep, createUpdatePackageStep, createWriteChangelogStep };
 //# sourceMappingURL=index.esm.js.map