Skip to content

Latest commit

 

History

History
329 lines (204 loc) · 12.6 KB

CHANGELOG.md

File metadata and controls

329 lines (204 loc) · 12.6 KB
Raw

Changelog

All notable changes to the readme-ai project will be documented in this file.

[v0.5.65] - 2024-03-01

This release introduces new LLM integrations (Google Vertex AI and Ollama), enhances the CLI, and improves the project's documentation. Additionally, this release is bumped to version 0.5.64 to align with the PyPI package version.

🚀 Features

CLI Options

  • feat: Add CLI options to enhance README.md file customization.
    • --alignment: Rename option to control the alignment of the README header text from --align to --alignment.
    • --api: Select LLM API service to use for generating README content - offline, ollama, openai, vertex.
    • --badge-color: Add option to change the color of the badge icons in the README header.
    • --badge-style: Rename option to change the style of the badge icons in the README header from --badges to --badge-style.
    • --image: option to include a project logo (file path, url, multimodal api) in the README header.
    • --rate-limit: Add option to control the rate limit for the LLM model.
    • --tree-depth: Add option to control depth of the generated repository tree structure.
    • --top-p: Add option to control the top-p value for the LLM model.

LLM Integrations

  • feat: Integrate Ollama for local model support. @eli64s (#92)
  • feat: Integrate Google Vertex AI LLM @eli64s (#90)

🧹 Chore

  • chore: Increase pytest coverage to over 90 percent.
  • chore: Integrate nox for testing codebase against multiple Python versions.

⚙️ Dependencies

  • Reduce number of non-standard library dependencies @eli64s (#84)

📄 Documentation

  • Setup and deploy mkdocs site via github-pages @eli64s (#87)

[v0.1.6] - 2023-10-24

🚀 Features

  • refactor: Reduce complexity of markdown table generator methods. @eli64s (#70)
  • enhancement: Add more context to LLM prompts. @eli64s (#69)
  • feat: Add CLI option --emojis to change README header prefixes @eli64s (#67)

🪲 Bug Fixes

  • fix: #35 Update tokenization logic causing issues for larger codebases @eli64s (#68)
  • fix #65: Update dependency parser method for build.gradle files @eli64s (#66)

📄 Documentation

  • docs: Update readmeai demo videos. @eli64s (#71)

⚙️ Dependency Updates

  • Bump urllib3 from 2.0.6 to 2.0.7 @dependabot (#64)

[v0.1.5] - 2023-10-15

🚀 Features

  • feat: Add support for three badge icon styles. @eli64s (#62)
  • feat: Add README file in German README-de and update other README files (FR, zh-CN).

🧩 Dependency Updates

  • Bump urllib3 from 2.0.5 to 2.0.6 @dependabot (#60)

[v0.1.4] - 2023-10-01

🚀 Features

  • Add new SVG badge icons that user's can select using the CLI option --badges @eli64s (#58)
  • Refactor readmeai package structure to improve organization and readability @eli64s (#58)

[v0.1.3] - 2023-09-30

🚀 Features

  • Setup script enhancement @hansipie #42

🧹 Chore

  • Decouple CLI as own directory to improve readability and maintainability @eli64s #56

📄 Documentation

  • Add README files in additional languages [fr, zh-CN] @eli64s #55

[v0.1.2] - 2023-09-25

🔐 Security

  • Implement custom directory tree method using pure Python #53
    • Removes dependency on the tree command line tool.
    • Improves security by removing the subprocess module.
    • More details on these risk can be found here

[v0.1.1] - 2023-09-24

🚀 Features

  • Add CLI option to run readme-ai offline, generating the same README output excluding the LLM generated text.
    • This option is useful for users who want to generate READMEs without an API key.
    • The option can be used by passing the -offline-mode flag to the CLI.

🛠 Changes

  • Refactor remaining dataclasses in conf.py to Pydantic models.

[v0.1.0] - 2023-09-20

🚀 Features

🐛 Bug Fixes

  • Update configuration ignore_files.toml to stop ignoring the following file extensions:
    • yaml, toml, txt, lock

🧹 Chore

  • Regenerate all README files in the examples directory to reflect the latest changes to the tool.

[v0.0.9] - 2023-09-19

🧹 Chore

  • Update README file to enhance project documentation.
    • Add Configuration section to provide context for customizing the tool.
    • Simplify Getting Started section install and run instructions.
    • Update Roadmap section with latest project goals.

[v0.0.8] - 2023-09-18

🐛 Bug Fixes

  • Update file parsing logic in parse.py and preprocess.py for codebases containing the following dependency files (issue #37).
    • CMakeLists.txt
    • Makefile.am
    • configure.ac
  • Credit to @mooujarrar for the help in solving this issue!

🔐 Security

  • Bump gitpython module to version 3.1.36 to address security vulnerability (Dependabot Alert #5 and issue #43).

[v0.0.7] - 2023-08-30

⚠️ Release v0.0.7 addresses a security vulnerability cloning git repositories via the GitPython package on Windows systems. This vulnerability could allow arbitrary command execution if code is run from a directory containing a malicious git.exe or git executable.

🔐 Security

Arbitrary Command Execution Mitigation

  • Dependabot Alert #3: GitPython untrusted search path on Windows systems leading to arbitrary code execution.
  • The previous git clone implementation sets the env argument to the path of the git executable in the current working directory. This poses a security risk as the code is susceptible to running arbitrary git commands from a malicious repository. 
    git.Repo.clone_from(repo_path, temp_dir, depth=1)
  • Updated the env argument to explicitly set the absolute path of the git executable. This ensures that the git executable used to clone the repository is the one thats installed in the system path, and not the one located in the current working directory. 
    git.Repo.clone_from(repo_path, temp_dir, depth=1, env=git_exec_path)

🚀 Features and Enhancements

Code Modularity

  • Introduced three methods to help isolate the Git executable discovery and validation logic.
    • find_git_executable(): Determines the absolute path of the Git executable.
    • validate_git_executable(): Validates the found Git executable path.
    • validate_file_permissions(): Validates the file permissions of the cloned repository.

File Permission Checks

  • For Unix systems, added checks to ensure the permissions of the cloned repository are set to 0o700. This is a best practice for secure temporary directories and prevents unauthorized users from accessing the directory.

⚠️ These updates aim to mitigate the vulnerbility raised in Dependabot alert #3. Users are advised to update readme-ai to the latest version, i.e pip install --upgrade readmeai. Please be mindful of this vulnerability and use caution when cloning repositories from untrusted sources, especially for Windows users.

[v0.0.6] - 2023-08-29

🐛 Bug Fixes

  • Corrected PyPI issue where the readmeai package was not being installed correctly.
    • The conf directory was not being included in the PyPI distribution as it was located in the project's root directory.
    • The tool now uses the pkg_resources module to access the conf directory from the readmeai package.

[v0.0.5] - 2023-07-31

🚀 Features and Enhancements

  • Add .dockerignore file to exclude unnecessary files from the Docker image.

🐛 Bug Fixes

  • Missing html closing tags in README tables were causing the GitHub pages site to render incorrectly.
    • Added closing tags to fix the issue.
    • Additionally, restructured a few sections of the README.

🔐 Security

  • Refactor Dockerfile to adhere to best practices.
    • Package Installation and Cleanup: Clean up cache after installing packages with apt-get to reduce the image size.
    • Non-root User Creation: Introduce a non-root user within the container to limit permissions and enhance security.
      • Assign a specific user ID and group ID that don't have superuser privileges.
    • File Permissions Management: Explicitly manage file permissions to prevent potential security risks when the image operates in varied contexts.

[v0.0.4] - 2023-07-30

🚀 Features and Enhancements

  • Publish readme-ai CLI to PyPI under the module name readmeai.
    • Refactored the codebase to use Click, migrating from argparse.
    • Update directory name from src to readmeai to match PyPI module name.
    • Update readmeai modules to use relative imports.
    • Update metadata and dependency details in the pyproject.toml file.
  • Update README.md documentation.
    • Add PyPI package badges at the top of the README.
    • Include instructions for downloading and running the readme-ai CLI from PyPI.
  • Add helper script update_image.sh to push the latest image to Docker Hub.

🐛 Bug Fixes

  • Update Dockerfile commands
    • Add line to install the tree command in order to generate the repository tree structure in the README.
    • Update installation to use the latest readmeai distribution from PyPI.

🗑 Removed

  • Removed setup.py script from the project root directory.
    • Poetry is used for package management via pyproject.toml. Thus, setup.py is no longer needed.

[v0.0.3] - 2023-06-29

🚀 Features and Enhancements

  • Add pydantic to validate the user's repository and api key inputs.
    • Validation was moved from main.py to conf.py.
  • Update README.md file contents.
    • Add Changelog section
    • Reformat HTML code blocks

🗑 Removed

  • Remove dacite dependency now that pydantic is used for dataclass creation.

[v0.0.2] - 2023-06-28

🚀 Features and Enhancements

  • Add CHANGELOG.md to track changes to the project.
  • Add new directory examples/video to store mp4 videos to demonstrate the readme-ai tool.

🛠 Changes

🗑 Removed

  • 🔧 Remove requirements.txt from the installation and setup scripts.
  • 📄 Remove outdated example README.md files from the examples directory.

[v0.0.1] - 2023-06-28

🚀 Features and Enhancements

  • Initial release of readme-ai v0.0.1

🛠 Changes

  • Refine the markdown template structure to be more readable.

🐛 Bug Fixes

🗑 Removed

  • Remove pandas dependency from the project.