The @semantic-release/release-notes-generator package, a plugin for semantic-release, automates changelog generation based on conventional commits. Version 9.0.0 and 8.0.0 share the same core functionality of creating changelog content, leveraging conventional-changelog. Both versions rely on dependencies like debug, lodash, get-stream, import-from, into-stream, read-pkg-up, conventional-commits-filter, conventional-commits-parser, conventional-changelog-writer, and conventional-changelog-angular to achieve this.
A key difference lies in the peer dependency semantic-release. Version 9.0.0 is compatible with semantic-release versions ">=15.8.0 <18.0.0", while version 8.0.0 targets semantic-release versions ">=15.8.0 <17.0.0". This signifies an update to support newer versions of the core semantic-release tool.
Furthermore, in devDependencies, version 9.0.0 uses ava":"^3.1.0" while version 8.0.0 depends on ava":"^2.0.0", and semantic-release":"^17.0.0" in version 9.0.0 versussemantic-release":"^16.0.0" in version 8.0.0. These changes indicates updates and improvements to the testing framework and the core semantic-release tool used during development. Developers upgrading should verify compatibility with their existing semantic-release configuration. The upgrade incorporates newer testing libraries and ensures compatibility with the latest semantic-release ecosystem, offering potential benefits in terms of stability and features.
The are not vulnerabilities for the version 9.0.0 of the package @semantic-release/release-notes-generator
