npm / semantic-release
semantic-release
What changed in semantic-release 25, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-18.
3 breaking4 security3 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initsemantic-release 2510 changes
Breaking changes 3
Node.js v22.14 is now the minimum required version.
The minimum supported Node.js version in the v24 range is now v24.10.0.
Support for Node.js v20, v21, and v23 was dropped.
Security 4
Authenticated repository URLs are no longer exposed in EGITNOPERMISSION errors.
Masks sensitive environment variables, including key, auth, and webhook variables.
Fixes argument injection via repositoryUrl in package.json.
Encoded secrets are now masked.
Fixes and other changes 3
Prevents template evaluation syntax in branch expansion.
Handles potential null values when trimming commit messages and git tags.
Prevents template evaluation syntax in tag formatting.