Skip to content

Release Notes: v0.1.0

Release Date: 2026-01-31

Overview

VersionConductor v0.1.0 is the initial release of the automated dependency PR management tool. It provides multi-org GitHub scanning for Renovate and Dependabot PRs, policy-based auto-merge decisions, and maintenance release creation.

Highlights

  • Dependency PR Discovery - Scan repositories across multiple GitHub organizations for open dependency update PRs
  • Policy-Based Auto-Merge - Cedar policy engine for defining auto-merge rules based on update type, test status, and PR age
  • Maintenance Releases - Automatically create patch releases when dependencies are updated

Features

CLI Commands

Command Description
scan List dependency PRs across organizations (read-only)
review Auto-review PRs based on Cedar policies
merge Merge approved, passing PRs
release Create maintenance releases for repos with merged dependency PRs
version Display version information

Dependency PR Scanning

# Scan single organization
versionconductor scan --orgs myorg

# Scan multiple organizations
versionconductor scan --orgs org1,org2,org3

# Filter by dependency bot
versionconductor scan --orgs myorg --bot renovate

# Filter by update type
versionconductor scan --orgs myorg --update-type patch,minor

Policy-Based Merging

Cedar policy-as-code for defining auto-merge rules:

// Auto-merge patch updates when tests pass and PR is 24h old
permit(
    principal,
    action == Action::"merge",
    resource
)
when {
    context.isDependencyPR == true &&
    context.testsPassed == true &&
    context.prAgeHours >= 24 &&
    context.updateType == "patch"
};

Built-in Merge Profiles

Profile Description Auto-merge
aggressive Merge all passing PRs immediately patch, minor, major
balanced Wait 24h, patch and minor only patch, minor
conservative Manual review required for major patch only

Maintenance Releases

# Show repos needing releases (dry-run)
versionconductor release --orgs myorg --dry-run

# Create maintenance releases
versionconductor release --orgs myorg

# Monthly scheduled release
versionconductor release --orgs myorg --since 2026-01-01

Installation

go install github.com/plexusone/versionconductor/cmd/versionconductor@v0.1.0

Or build from source:

git clone https://github.com/plexusone/versionconductor.git
cd versionconductor
go build -o versionconductor ./cmd/versionconductor

Dependencies

Module Version Purpose
github.com/google/go-github/v82 v82.0.0 GitHub API client
github.com/grokify/gogithub v0.7.0 GitHub API helpers
github.com/spf13/cobra v1.10.2 CLI framework
github.com/spf13/viper v1.21.0 Configuration management

Safety Features

  1. Dry-run default - All write commands require explicit --execute flag
  2. Policy required - No auto-merge without explicit policy
  3. Audit log - All actions logged with timestamps
  4. Rate limiting - Respect GitHub API limits

What's Next

  • v0.2.0: Cedar policy validation and testing
  • v0.3.0: Slack/Teams notifications for merge actions
  • v0.4.0: Dashboard for dependency update status