changelog-maintenance by aj-geddes/useful-ai-prompts
npx skills add https://github.com/aj-geddes/useful-ai-prompts --skill changelog-maintenance创建和维护结构化的变更日志,记录项目中所有重要的变更,遵循行业最佳实践,如 Keep a Changelog 和语义化版本控制。
# Changelog
本项目所有重要的变更都将记录在此文件中。
格式基于 [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
并且本项目遵循 [Semantic Versioning](https://semver.org/spec/v2.0.0.html)。
## [Unreleased]
### Added
- 已添加的新功能或能力
- 可以是多个项目
### Changed
- 现有功能的变更
- 功能工作方式的更新
### Deprecated
- 将在未来版本中移除的功能
- 包含移除时间线
### Removed
- 已移除的功能
- 先前已弃用的功能
### Fixed
- 错误修复
- 安全补丁
### Security
- 已修复的安全漏洞
- 重要的安全更新
## [2.1.0] - 2025-01-15
### Added
- 为 GitHub 和 Google 添加了 OAuth2 身份验证支持
- 用于可自定义布局的新仪表板小部件系统
- 用于处理多条记录的批量操作 API
- 支持自定义模板的导出到 Excel 功能
- 所有页面均支持深色模式主题
- 用于实时通知的 WebSocket 支持
- 在现有 REST 端点之外新增 GraphQL API
- 新增 10 种语言的国际化支持
- 西班牙语、法语、德语、意大利语、葡萄牙语
- 日语、韩语、中文(简体/繁体)、阿拉伯语
### Changed
- 更新了用户个人资料页面,改进了布局和性能
- 主要 API 端点从 REST 迁移到 GraphQL
- 改进了错误消息,提供更多上下文和建议
- 重构了身份验证系统以提高安全性
- 将依赖项更新到最新版本
- React 18.2.0 → 19.0.0
- Node.js 16.x → 18.x(最低要求版本)
- PostgreSQL 13 → 14
- 将默认分页从 20 项更改为 50 项
- 改进了搜索算法,结果速度提升 3 倍
### Deprecated
- REST API v1 端点(将在 v3.0.0 中移除)
- 请使用 GraphQL API 或 REST API v2
- 迁移指南:[docs/migration-v1-to-v2.md](docs/migration-v1-to-v2.md)
- 旧版身份验证令牌(请在 2025-06-01 前移除)
- 请替换为 JWT 令牌
- `config.json` 中的旧配置格式
- 请使用 `config.yaml` 中的新 YAML 格式
### Removed
- 移除了已弃用的 `/api/users/list` 端点
- 请使用 `/api/v2/users`
- 移除了对 Internet Explorer 11 的支持
- 最低浏览器版本:Chrome 90+、Firefox 88+、Safari 14+、Edge 90+
- 移除了 jQuery 依赖(现在使用纯 JavaScript)
- 移除了旧的仪表板小部件(已被新的小部件系统取代)
### Fixed
- 修复了导致重复扣款的订单处理中的竞态条件
- 受影响版本:2.0.0 - 2.0.5
- 问题:[#1234](https://github.com/user/repo/issues/1234)
- 修复了 WebSocket 连接中的内存泄漏
- 修复了日期选择器中错误的时区处理
- 修复了 CSV 导出未包含所有列的问题
- 修复了表单提交中的 CSRF 漏洞 (CVE-2025-12345)
- 修复了导航菜单中的无障碍访问问题
- 现在完全支持键盘导航
- 屏幕阅读器友好
- 修复了 iPad Pro 上的移动端响应式问题
- 修复了搜索中的 SQL 注入漏洞 (CVE-2025-12346)
- **安全影响**:高
- **受影响版本**:2.0.0 - 2.0.9
- **推荐操作**:立即升级
### Security
- **严重**:修复了用户搜索中的 SQL 注入 (CVE-2025-12346)
- 影响:允许未经授权的数据库访问
- 受影响版本:v2.0.0 至 v2.0.9
- 操作:立即升级到 v2.1.0
- 修复了评论渲染中的 XSS 漏洞 (CVE-2025-12347)
- 更新了所有已知存在安全漏洞的依赖项
- 在所有 API 端点上实施了速率限制
- 为所有表单添加了 CSRF 保护
- 启用了内容安全策略标头
## [2.0.5] - 2025-01-08
### Fixed
- 热修复:修复了导致导出功能数据丢失的关键错误
- 修复了与 LDAP 集成的身份验证问题
- 解决了处理大型数据集时的性能下降问题
### Security
- 修补了身份验证绕过漏洞 (CVE-2025-12344)
## [2.0.0] - 2025-01-01
### Added
- 具有现代外观和感觉的完整 UI 重新设计
- 性能更好的新 REST API v2
- 用户角色和权限系统
- 所有管理操作的审计日志记录
- 电子邮件模板自定义
- 双因素身份验证 (2FA)
- API 速率限制
- 数据库备份自动化
### Changed
- **破坏性变更**:将 API 响应格式从 XML 更改为 JSON
- 所有 API 使用者必须更新其集成
- 请参阅迁移指南:[docs/api-v1-to-v2.md](docs/api-v1-to-v2.md)
- **破坏性变更**:为保持一致性重命名了数据库表
- `user` → `users`
- `order` → `orders`
- 运行迁移脚本:`npm run migrate:v2`
- **破坏性变更**:将身份验证从基于会话更改为 JWT
- 现有会话将失效
- 用户需要重新登录
- 将数据库查询性能提高了 50%
- 将最低 Node.js 版本更新为 16.x
### Removed
- **破坏性变更**:移除了对 Node.js 12 和 14 的支持
- **破坏性变更**:移除了已弃用的配置选项
- `USE_OLD_AUTH` - 使用 JWT 身份验证
- `LEGACY_MODE` - 不再支持
### Migration Guide
**从 v1.x 升级到 v2.0:**
1. 将 Node.js 更新到版本 16 或更高版本
2. 更新您的 API 集成:
```javascript
// Old (v1)
fetch("/api/users/list")
.then((res) => res.text())
.then((xml) => parseXML(xml));
// New (v2)
fetch("/api/v2/users")
.then((res) => res.json())
.then((data) => console.log(data));
```
3. 运行数据库迁移:
npm run migrate:v2
4. 更新环境变量:
# Remove
USE_OLD_AUTH=true
LEGACY_MODE=true
# Add
JWT_SECRET=your-secret-key
JWT_EXPIRES_IN=7d
广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者,精准高效
初始版本
用户管理
基础 API
身份验证和授权
数据库迁移
单元和集成测试
# Release Notes - Version 2.1.0
**Release Date:** January 15, 2025
**Download:** [v2.1.0](https://github.com/user/repo/releases/tag/v2.1.0)
## 🎉 Highlights
- **OAuth2 Authentication**: Sign in with GitHub and Google
- **GraphQL API**: New GraphQL endpoint alongside REST API
- **Dark Mode**: Full dark mode support across all pages
- **Real-time Notifications**: WebSocket-powered live updates
- **10 New Languages**: Expanded internationalization support
## 📦 What's New
### OAuth2 Authentication
You can now sign in using your GitHub or Google account. Configure OAuth in Settings > Authentication.
```javascript
// Enable OAuth in your config
{
"auth": {
"providers": ["github", "google"],
"github": {
"clientId": "your-client-id",
"clientSecret": "your-client-secret"
}
}
}
Access your data with GraphQL for more efficient queries:
query GetUser {
user(id: "123") {
id
name
email
orders {
id
total
items {
product {
name
price
}
}
}
}
}
Endpoint: https://api.example.com/graphql Documentation: GraphQL API Docs
Enable dark mode in Settings > Appearance or use system preferences.

The following REST API v1 endpoints are deprecated and will be removed in v3.0.0:
| Old Endpoint | New Endpoint | Migration Guide |
|---|---|---|
/api/users/list | /api/v2/users | Link |
/api/products/search | /api/v2/products?q= | Link |
Timeline : These endpoints will continue working until June 2025.
# Backup your database first
pg_dump your_database > backup.sql
# Pull latest version
git pull origin main
# Install dependencies
npm install
# Run migrations
npm run migrate
# Restart application
npm start
Please see the v1 to v2 Migration Guide for detailed upgrade instructions.
Thanks to all contributors who made this release possible:
Coming in v2.2.0:
Stay tuned!
Version: MAJOR.MINOR.PATCH
MAJOR version: Incompatible API changes MINOR version: Add functionality (backwards-compatible) PATCH version: Backwards-compatible bug fixes
Examples:
每周安装量
122
代码仓库
GitHub 星标数
126
首次出现
2026年1月21日
安全审计
已安装于
opencode104
gemini-cli102
codex99
claude-code94
cursor90
github-copilot84
Create and maintain structured changelogs that document all notable changes to your project, following industry best practices like Keep a Changelog and Semantic Versioning.
# Changelog
All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
## [Unreleased]
### Added
- New feature or capability that has been added
- Can be multiple items
### Changed
- Changes in existing functionality
- Updates to how features work
### Deprecated
- Features that will be removed in upcoming releases
- Include timeline for removal
### Removed
- Features that have been removed
- Previously deprecated features
### Fixed
- Bug fixes
- Security patches
### Security
- Security vulnerabilities that have been fixed
- Important security updates
## [2.1.0] - 2025-01-15
### Added
- Added OAuth2 authentication support for GitHub and Google
- New dashboard widget system for customizable layouts
- Bulk operations API for processing multiple records
- Export to Excel functionality with custom templates
- Dark mode theme support across all pages
- WebSocket support for real-time notifications
- GraphQL API alongside existing REST endpoints
- Internationalization support for 10 new languages
- Spanish, French, German, Italian, Portuguese
- Japanese, Korean, Chinese (Simplified/Traditional), Arabic
### Changed
- Updated user profile page with improved layout and performance
- Migrated from REST to GraphQL for main API endpoints
- Improved error messages with more context and suggestions
- Refactored authentication system for better security
- Updated dependencies to latest versions
- React 18.2.0 → 19.0.0
- Node.js 16.x → 18.x (minimum required version)
- PostgreSQL 13 → 14
- Changed default pagination from 20 to 50 items
- Improved search algorithm for 3x faster results
### Deprecated
- REST API v1 endpoints (will be removed in v3.0.0)
- Use GraphQL API or REST API v2 instead
- Migration guide: [docs/migration-v1-to-v2.md](docs/migration-v1-to-v2.md)
- Legacy authentication tokens (remove by 2025-06-01)
- Replace with JWT tokens
- Old configuration format in `config.json`
- Use new YAML format in `config.yaml`
### Removed
- Removed deprecated `/api/users/list` endpoint
- Use `/api/v2/users` instead
- Removed support for Internet Explorer 11
- Minimum browser versions: Chrome 90+, Firefox 88+, Safari 14+, Edge 90+
- Removed jQuery dependency (now pure JavaScript)
- Removed old dashboard widgets (replaced with new widget system)
### Fixed
- Fixed race condition in order processing causing duplicate charges
- Affected versions: 2.0.0 - 2.0.5
- Issue: [#1234](https://github.com/user/repo/issues/1234)
- Fixed memory leak in WebSocket connections
- Fixed incorrect timezone handling in date pickers
- Fixed CSV export not including all columns
- Fixed CSRF vulnerability in form submissions (CVE-2025-12345)
- Fixed accessibility issues in navigation menu
- Now fully keyboard navigable
- Screen reader friendly
- Fixed mobile responsive issues on iPad Pro
- Fixed SQL injection vulnerability in search (CVE-2025-12346)
- **Security Impact**: High
- **Affected Versions**: 2.0.0 - 2.0.9
- **Recommended Action**: Upgrade immediately
### Security
- **CRITICAL**: Fixed SQL injection in user search (CVE-2025-12346)
- Impact: Allows unauthorized database access
- Affected: v2.0.0 to v2.0.9
- Action: Upgrade to v2.1.0 immediately
- Fixed XSS vulnerability in comment rendering (CVE-2025-12347)
- Updated all dependencies with known security vulnerabilities
- Implemented rate limiting on all API endpoints
- Added CSRF protection to all forms
- Enabled Content Security Policy headers
## [2.0.5] - 2025-01-08
### Fixed
- Hotfix: Critical bug causing data loss in export functionality
- Fixed authentication issues with LDAP integration
- Resolved performance degradation with large datasets
### Security
- Patched authentication bypass vulnerability (CVE-2025-12344)
## [2.0.0] - 2025-01-01
### Added
- Complete UI redesign with modern look and feel
- New REST API v2 with better performance
- User roles and permissions system
- Audit logging for all administrative actions
- Email templates customization
- Two-factor authentication (2FA)
- API rate limiting
- Database backup automation
### Changed
- **BREAKING**: Changed API response format from XML to JSON
- All API consumers must update their integration
- See migration guide: [docs/api-v1-to-v2.md](docs/api-v1-to-v2.md)
- **BREAKING**: Renamed database tables for consistency
- `user` → `users`
- `order` → `orders`
- Run migration script: `npm run migrate:v2`
- **BREAKING**: Changed authentication from session-based to JWT
- Existing sessions will be invalidated
- Users need to log in again
- Improved database query performance by 50%
- Updated minimum Node.js version to 16.x
### Removed
- **BREAKING**: Removed support for Node.js 12 and 14
- **BREAKING**: Removed deprecated configuration options
- `USE_OLD_AUTH` - Use JWT authentication
- `LEGACY_MODE` - No longer supported
### Migration Guide
**From v1.x to v2.0:**
1. Update Node.js to version 16 or higher
2. Update your API integration:
```javascript
// Old (v1)
fetch("/api/users/list")
.then((res) => res.text())
.then((xml) => parseXML(xml));
// New (v2)
fetch("/api/v2/users")
.then((res) => res.json())
.then((data) => console.log(data));
```
3. Run database migrations:
npm run migrate:v2
4. Update environment variables:
# Remove
USE_OLD_AUTH=true
LEGACY_MODE=true
# Add
JWT_SECRET=your-secret-key
JWT_EXPIRES_IN=7d
Initial release
User management
Basic API
Authentication and authorization
Database migrations
Unit and integration tests
# Release Notes - Version 2.1.0
**Release Date:** January 15, 2025
**Download:** [v2.1.0](https://github.com/user/repo/releases/tag/v2.1.0)
## 🎉 Highlights
- **OAuth2 Authentication**: Sign in with GitHub and Google
- **GraphQL API**: New GraphQL endpoint alongside REST API
- **Dark Mode**: Full dark mode support across all pages
- **Real-time Notifications**: WebSocket-powered live updates
- **10 New Languages**: Expanded internationalization support
## 📦 What's New
### OAuth2 Authentication
You can now sign in using your GitHub or Google account. Configure OAuth in Settings > Authentication.
```javascript
// Enable OAuth in your config
{
"auth": {
"providers": ["github", "google"],
"github": {
"clientId": "your-client-id",
"clientSecret": "your-client-secret"
}
}
}
Access your data with GraphQL for more efficient queries:
query GetUser {
user(id: "123") {
id
name
email
orders {
id
total
items {
product {
name
price
}
}
}
}
}
Endpoint: https://api.example.com/graphql Documentation: GraphQL API Docs
Enable dark mode in Settings > Appearance or use system preferences.

The following REST API v1 endpoints are deprecated and will be removed in v3.0.0:
| Old Endpoint | New Endpoint | Migration Guide |
|---|---|---|
/api/users/list | /api/v2/users | Link |
/api/products/search | /api/v2/products?q= | Link |
Timeline : These endpoints will continue working until June 2025.
# Backup your database first
pg_dump your_database > backup.sql
# Pull latest version
git pull origin main
# Install dependencies
npm install
# Run migrations
npm run migrate
# Restart application
npm start
Please see the v1 to v2 Migration Guide for detailed upgrade instructions.
Thanks to all contributors who made this release possible:
Coming in v2.2.0:
Stay tuned!
## Semantic Versioning Guide
Version: MAJOR.MINOR.PATCH
MAJOR version: Incompatible API changes MINOR version: Add functionality (backwards-compatible) PATCH version: Backwards-compatible bug fixes
Examples:
1.0.0 → 1.0.1: Bug fixes
1.0.1 → 1.1.0: New features (backwards-compatible)
1.1.0 → 2.0.0: Breaking changes
Weekly Installs
122
Repository
GitHub Stars
126
First Seen
Jan 21, 2026
Security Audits
Gen Agent Trust HubPassSocketPassSnykPass
Installed on
opencode104
gemini-cli102
codex99
claude-code94
cursor90
github-copilot84
文档查找工具:实时获取库、框架和API最新文档,替代训练数据
1,100 周安装
Ensembl 数据库查询与基因组分析指南 | 基因注释、序列检索、变异分析
178 周安装
头脑风暴助手 - 使用Gemini AI系统生成创意想法,支持SCAMPER、六顶思考帽等方法
176 周安装
EDOT Java 插桩指南:使用 Elastic OpenTelemetry Java 代理实现应用可观测性
181 周安装
应用商店优化 (ASO) 完整指南:关键词研究、元数据优化与竞品分析工具
175 周安装
ETE工具包:Python系统发育分析库,用于进化树操作、基因树分析与NCBI分类学集成
178 周安装
matchms Python质谱数据处理库:光谱导入、过滤、相似度计算与工作流构建
178 周安装