Added
- •Add automatic audience detection to tailor changelog language for your readers — Changesmith now infers whether your project targets developers, end-users, or a mixed audience based on repository name and changelog style (e.g., repos with `-sdk`, `-cli`, or `-api` in the name get developer-oriented language). You can also set the `audience` field explicitly in repo settings to override the auto-detection
- •Add security-aware changelog generation — Changesmith now detects security-related commits via CVE/CWE references, security scopes, and keywords, then groups them into a dedicated `### Security` section without duplicating them under other headings. Includes careful false-positive prevention so phrases like "dependency injection" or "build script injection point" aren't misidentified as security issues
- •Add improved prompt guidance for higher-quality changelogs — includes good/bad entry examples, deduplication rules for squash-merge duplicates, a structured Before/After/Migration format for breaking changes, category mapping from commit types to Keep a Changelog sections, and smarter tool-use strategy so the AI fetches extra context only when commit messages are ambiguous
- •Add importance-based commit sorting for large releases — when a release has many commits, the most significant changes (features and fixes) are now prioritized over recency, producing more useful summaries
Fixed
- •Fix a dependency security vulnerability by updating minimatch to a patched version, resolving potential regular expression denial-of-service issues