feat(dependency-impact): add Composer support and npm/Packagist repo resolution#10
Merged
Conversation
Add `author` to PullRequestInfo so consumers can identify bot PRs. Add `listReleaseNotesBetween()` to fetch release notes from GitHub Releases API between two semver tags.
…iller - Fetch release notes via PR body (bot PRs) or GitHub Releases API - Branch prompt based on whether usage sites were found - With usage: cross-reference release notes against actual code - Without usage: summarize release notes, skip fabricated analysis - Explicitly ban generic advice and speculative breaking changes
…mposer.lock Parse dependency version changes from composer.json (diff-based, same approach as package.json) and composer.lock (name+version field tracking). Add PHP namespace import patterns for codebase usage scanning.
Cover composer.json version change detection, composer.lock version tracking, unchanged version ignoring, multiple lock changes, and PHP namespace import pattern generation.
…repos Make resolveGitHubRepo async with registry lookups: - npm: fetch repository URL from registry.npmjs.org - Composer: fetch source URL from packagist.org Also add .php to source file scanning extensions.
…lution Update supported ecosystems, workflow trigger paths, and release notes sourcing table. Remove outdated npm/pip resolution caveat.
dortort
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
composer.json(diff-based) andcomposer.lock(name+version field tracking) for dependency version changes; scan.phpfiles for usage via PHP namespace import patternsregistry.npmjs.orgto resolve their GitHub source repo, enabling release notes via the GitHub Releases APIpackagist.orgto resolve their GitHub source repoPullRequestInfoincludesauthor; newlistReleaseNotesBetween()fetches GitHub Releases between two semver tagsTest plan
npm run build— all 7 projects compilenpm testin dependency-impact — all 24 parser tests pass (5 new Composer tests)