Releases
Automate versioning, CHANGELOG generation, Git tagging, and npm publishing with release-it or Changesets. DevFlow configures semantic versioning for both single-package projects and monorepos.
Release-it
Interactive release CLI — automates version bumps, changelogs, Git tags, and npm publishing.
- ID:
release-it - Category: Release
What it does
- Installs
release-itand@release-it/conventional-changelog - Creates
.release-it.jsonconfiguration - Adds
releasescript
Generated Config
{
"git": {
"commitMessage": "chore: release v${version}",
"tagName": "v${version}"
},
"npm": {
"publish": false
},
"plugins": {
"@release-it/conventional-changelog": {
"preset": "angular",
"infile": "CHANGELOG.md"
}
}
}Changesets
Monorepo-friendly versioning — manages version bumps and changelogs across multiple packages.
- ID:
changesets - Category: Release
- Recommended for: Monorepos
What it does
- Installs
@changesets/cli - Creates
.changeset/config.json - Adds
changeset,version, andpublishscripts
This is the preferred release tool for monorepos. When a monorepo is detected, presets automatically use Changesets instead of Release-it.
semantic-release
Fully automated CI releases — versions, changelogs, and publishing triggered entirely from CI.
- ID:
semantic-release - Category: Release
What it does
- Installs
semantic-releaseand plugins - Creates
.releaserc.jsonconfiguration - Adds
semantic-releasescript
Conventional Changelog
Standalone changelog generation — generates CHANGELOG.md from conventional commits without a full release flow.
- ID:
conventional-changelog - Category: Release
What it does
- Installs
conventional-changelog-cli - Adds
changelogscript
CI/CD
Generate GitHub Actions CI/CD pipelines, GitLab CI configs, Renovate, and Dependabot configurations for Node.js projects automatically. Complete lint → typecheck → test → build workflow out of the box.
Security
Automatically add npm audit, Gitleaks secret scanning, Trivy vulnerability scanner, and OSV-Scanner to your Node.js project and CI pipeline. Prevent committing secrets and vulnerable dependencies.