Skip to content

CHANGELOG.md

Latest commit

 

History

History
190 lines (160 loc) · 10.9 KB

CHANGELOG.md

File metadata and controls

190 lines (160 loc) · 10.9 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

  • generating-accomplishments skill — Generate PDS EN accomplishment status reports from activity.json or via live pds-activity CLI collection
    • Accepts an existing activity.json or runs pds-activity (lasso-issues main branch) to collect fresh data
    • Asks clarifying questions before generating: reporting period label, audience, priority themes, scope, format
    • Groups accomplishments by PDS product team using embedded pds-products.yaml mapping
    • Organizes output by work stream: Core Data Services, Planetary Data Cloud, Web Modernization
    • Highlights core backbone products (⭐) and surfaces releases, breaking changes, and security fixes
    • Deduplicates issues and linked PRs; filters noise labels (duplicate, wontfix, icebox)
    • "At a Glance" metrics dashboard for stakeholder audience: bug/requirement/enhancement/task/theme/security/breaking-change counts, releases shipped, repositories active, must-have/should-have completion counts
    • Summary by Work Stream table: per-column breakdown of bugs, requirements, enhancements, tasks, and releases per work stream
    • Repos in ignore: true products (dependencies, node-products, archived_repositories, ops) fully excluded from all counts and bullets
    • Auto-refreshes pds-products.yaml from upstream if local copy is >30 days old
    • Closes #23

Changed

  • 🔄 Renamed pds-github-skills → pds-agent-skills - Plugin name now matches the marketplace identifier

    • Install with: /plugin install pds-agent-skills@pds-agent-skills
    • All documentation updated

  • 🔄 Merged sonarcloud-skills + dependabot-skills → security-skills - Consolidated both security plugins into a single thematic plugin

    • New plugin name: security-skills (version 1.0.0)
    • Install with: /plugin install security-skills@pds-agent-skills
    • Contains all 5 security skills: sonarcloud-security-exporting, sonarcloud-security-triaging, sonarcloud-security-updating, dependabot-alerts-exporting, dependabot-alerts-triaging
    • Plugin count reduced from 3 to 2; skill count unchanged at 8
    • Updated README, CLAUDE.md, and marketplace.json

Added

  • sonarcloud-security-triaging skill - Analyze security issues and suggest triage decisions
    • Reads exported CSV from sonarcloud-security-exporting skill
    • Analyzes code context around each flagged security issue
    • Understands SonarCloud security rules and common false positive patterns
    • Suggests Action, Resolution, and Comment for each issue with reasoning
    • Identifies patterns like URI literals, test fixtures, dev code, example configurations
    • Groups similar issues for bulk triage efficiency
    • Generates recommendations CSV with confidence levels
    • Provides detailed rationale for each triage recommendation
    • Added to sonarcloud-skills plugin (version 2.0.0 → 3.0.0)

Changed

  • 🔄 SonarCloud Skills Renamed for Clarity - Improved skill naming to reflect actual functionality

    • sonarcloud-security-audit → sonarcloud-security-exporting (exports data to CSV)
    • sonarcloud-security-triage → sonarcloud-security-updating (applies decisions back to SonarCloud)
    • New naming uses sonarcloud-* prefix for namespace grouping and easy discovery
    • All skill descriptions updated to clarify export/triage/update workflow
    • Documentation updated across README, CLAUDE.md, and skill files
    • Workflow now clear: export → triage → update

  • sonarcloud-security-triaging - Added token usage tracking to metrics

    • Tracks cumulative token usage across entire triage session
    • tokenUsage.total field added to JSON metrics schema
    • Token usage displayed in TRIAGE_METRICS.md dashboard
    • Helps monitor AI processing cost and complexity for budgeting
    • Enables efficiency analysis across different triage sessions

Added

  • creating-pds-pull-requests skill - Create GitHub pull requests in NASA-PDS repositories
    • Auto-detects current repository and branch from git context
    • Intelligent base branch detection (main/master/develop)
    • Uses cached NASA-PDS official PR template (7-day refresh)
    • Auto-links to related issues with Closes #123 syntax
    • Supports reviewer and assignee assignment
    • Applies appropriate labels based on PR type (feature, bugfix, hotfix, refactor, docs, chore)
    • Includes AI assistance disclosure (NASA-PDS requirement)
    • Draft PR support for work-in-progress changes
    • Breaking change detection and documentation requirements
    • Security sanitization warnings for PII and credentials
    • Comprehensive validation: uncommitted changes, commits ahead, branch pushed status
    • Large PR warnings (>50 files or >20 commits)
    • Helper scripts: detect-context.mjs (auto-detect git state), cache-pr-template.mjs (template caching)
    • Added to pds-github-skills plugin (version 2.0.0 → 2.1.0)

Changed

  • 🔄 Plugin Marketplace Restructure - Reorganized into logical plugin groupings under pds-agent-skills marketplace
    • Marketplace name: Changed from pds-marketplace to pds-agent-skills
    • Plugin grouping: Organized 5 skills into 2 thematic plugins:
      • pds-github-skills: Release notes generation + pull request creation + GitHub issue creation
      • sonarcloud-skills: Security audit + security triage
    • Each plugin uses the skills field to specify its subset of skills
    • Both plugins share the same ./static/marketplace/ source directory
    • Users install plugins by theme: /plugin install pds-github-skills@pds-agent-skills
    • Updated all documentation with new marketplace and plugin names
    • Version bumped to 2.0.0 to reflect new plugin architecture
  • 📁 Repository Reorganization - Moved all skills to static/marketplace/skills/ structure
    • Organized skills under unified marketplace directory
    • Maintains clean separation of marketplace content from documentation
    • Facilitates future additions (agents, hooks, commands)
    • Updated marketplace.json paths to point to new location
    • Added README in static/marketplace/ explaining organization

Added

  • 🆕 Plugin Marketplace - Transformed repository into official Claude Code plugin marketplace
    • Created .claude-plugin/marketplace.json catalog for easy distribution
    • Added plugin.json manifests to all 4 plugins
    • Users can now install with /plugin marketplace add NASA-PDS/pds-agent-skills
    • Automatic version management and updates
    • Follows official Anthropic plugin marketplace specification
  • sonarcloud-security-audit plugin - Audit SonarCloud security issues for NASA PDS repositories
    • Scans all projects in nasa-pds organization for security vulnerabilities and hotspots
    • Exports to CSV with triage columns (severity, status, rule, component, line, URL)
    • Automatic pagination for large result sets (500 items per page)
    • Rate limiting and retry logic with exponential backoff
    • Priority suggestions based on severity (BLOCKER/CRITICAL highlighted)
    • Direct links to SonarCloud UI for each issue
    • Helper script: fetch-security-issues.mjs with comprehensive error handling
  • sonarcloud-security-triage plugin - Apply triage decisions to SonarCloud security issues
    • Reads CSV with triage decisions (Action, Resolution, Comment, Reviewer columns)
    • Bulk updates security hotspots (TO_REVIEW → REVIEWED with SAFE/FIXED resolution)
    • Bulk updates vulnerabilities (OPEN → confirm/falsepositive/wontfix/resolve)
    • Dry-run mode to preview changes before applying
    • Comprehensive error handling and progress tracking
    • Automatic retry logic with rate limiting (429 responses)
    • Detailed summary with success/failure counts
    • Helper script: apply-triage.mjs with idempotent operations
  • creating-pds-issues plugin - Creates GitHub issues in NASA-PDS repositories using official templates
    • 6 template types: Bug, I&T Bug, Feature Request, Task, Vulnerability, Release Theme
    • Auto-detection of current repository from git remote (origin → upstream fallback)
    • Security-first with comprehensive PII/credential sanitization guidance
    • Template caching (7-day refresh) to minimize GitHub API calls
    • Configurable assignee via PDS_ISSUE_ASSIGNEE environment variable

Changed

  • 🔄 Installation Method - Plugin marketplace is now the recommended installation method
    • Updated README.md with plugin marketplace installation as primary method
    • Manual installation (git clone/submodule) moved to "Alternative" section
    • Added plugin management commands documentation
  • Updated README.md with plugin terminology (skills → plugins)
  • Updated README.md table to show 2 plugins with 4 active production skills
  • Updated README.md badges to reflect plugin marketplace structure
  • Updated CLAUDE.md with all 4 active plugins and SonarCloud integration details
  • Deprecated SKILLS_CATALOG.md (moved to backup/) in favor of README.md plugin listing
  • Enhanced Security & Compliance use case with triage workflow
  • Updated repository structure documentation to include sonarcloud-security-triage

Removed

  • pds-status-reporter and pds-rdd-generator skills moved to backup/ directory (not production-ready)

[1.0.0] - 2024-11-06

Added

  • SKILLS_CATALOG.md - Comprehensive browsable catalog of all available skills with:
    • Detailed descriptions and use cases for each skill
    • Organization by category, use case, and work stream
    • Status indicators for skill maturity
    • Quick install instructions
    • Shared resources documentation
  • MARKETPLACE_SETUP.md - Complete guide for configuring repository as a discoverable skills marketplace
    • GitHub topics and discoverability configuration
    • Repository settings recommendations
    • Issue template examples
    • Promotion and maintenance strategies
  • Marketplace badges in README.md:
    • Skills count badge
    • License badge
    • Claude Code compatibility badge
  • Skills catalog link prominently featured in README.md
  • Skills overview table in README.md for quick reference
  • generating-release-notes skill - Generates structured GitHub release notes with breaking change detection, categorization, and upload
  • Shared resources for cross-skill use:
    • shared-resources/pds-labels.yaml - Canonical PDS label definitions

Changed

  • Transformed repository into browsable skills marketplace
  • Updated README.md with catalog-first approach and marketplace badging
  • Reorganized available skills section for better discoverability

Infrastructure

  • Repository structure designed for Claude Code automatic skill discovery
  • Support for both project-level (.claude/skills/) and personal (~/.claude/skills/) installations
  • Git submodule support for easier updates