Changelog Management
Skill Profile
(Select at least one profile to enable specific modules)
Overview
Changelogs document changes to software over time, helping users and developers understand what has changed. Well-maintained changelogs follow structured formats, use semantic versioning, categorize changes clearly, and provide context for breaking changes and migrations.
Why This Matters
- Reduces Support Burden: Clear change history reduces support questions and ticket volume
- Increases Transparency: Transparent updates build trust with users and developers
- Lowers Communication Costs: Faster, more consistent communication with standardized formats
- Improves Quality: Consistent documentation ensures users can track changes and understand impacts
- Enables Debugging: Version history helps identify when issues were introduced
- Facilitates Upgrades: Migration guides and breaking change documentation simplify upgrades
Core Concepts & Rules
1. Core Principles
- Follow established patterns and conventions
- Maintain consistency across codebase
- Document decisions and trade-offs
2. Implementation Guidelines
- Start with the simplest viable solution
- Iterate based on feedback and requirements
- Test thoroughly before deployment
Inputs / Outputs / Contracts
- Inputs:
- Software changes (features, fixes, deprecations)
- Version information (semantic versioning)
- Breaking change notifications
- Migration guides
- Entry Conditions:
- Version control system in place (Git)
- Release process defined
- Changelog format selected
- Outputs:
- Changelog file updates
- Release notes
- Version tags
- Migration documentation
- Artifacts Required (Deliverables):
- Changelog file (CHANGELOG.md)
- Release notes template
- Version tagging strategy
- Migration guide template
- Acceptance Evidence:
- Changelog follows Keep a Changelog format
- Semantic versioning followed
- Breaking changes clearly marked
- Migration guides provided
- Success Criteria:
- Changelog completeness > 95%
- Semantic versioning compliance
- Developer satisfaction score > 4.0/5.0
- Support ticket reduction > 50%
Skill Composition
Quick Start / Implementation Example
- Review requirements and constraints
- Set up development environment
- Implement core functionality following patterns
- Write tests for critical paths
- Run tests and fix issues
- Document any deviations or decisions
# Example implementation following best practices
def example_function():
# Your implementation here
pass
Assumptions / Constraints / Non-goals
- Assumptions:
- Development environment is properly configured
- Required dependencies are available
- Team has basic understanding of domain
- Constraints:
- Must follow existing codebase conventions
- Time and resource limitations
- Compatibility requirements
- Non-goals:
- This skill does not cover edge cases outside scope
- Not a replacement for formal training
Compatibility & Prerequisites
- Supported Versions:
- Python 3.8+
- Node.js 16+
- Modern browsers (Chrome, Firefox, Safari, Edge)
- Required AI Tools:
- Code editor (VS Code recommended)
- Testing framework appropriate for language
- Version control (Git)
- Dependencies:
- Language-specific package manager
- Build tools
- Testing libraries
- Environment Setup:
.env.example keys: API_KEY, DATABASE_URL (no values)
Test Scenario Matrix (QA Strategy)
| Type |
Focus Area |
Required Scenarios / Mocks |
| Unit |
Core Logic |
Must cover primary logic and at least 3 edge/error cases. Target minimum 80% coverage |
| Integration |
DB / API |
All external API calls or database connections must be mocked during unit tests |
| E2E |
User Journey |
Critical user flows to test |
| Performance |
Latency / Load |
Benchmark requirements |
| Security |
Vuln / Auth |
SAST/DAST or dependency audit |
| Frontend |
UX / A11y |
Accessibility checklist (WCAG), Performance Budget (Lighthouse score) |
Technical Guardrails & Security Threat Model
1. Security & Privacy (Threat Model)
- Top Threats: Injection attacks, authentication bypass, data exposure
2. Performance & Resources
3. Architecture & Scalability
4. Observability & Reliability
Agent Directives & Error Recovery
(ข้อกำหนดสำหรับ AI Agent ในการคิดและแก้ปัญหาเมื่อเกิดข้อผิดพลาด)
- Thinking Process: Analyze root cause before fixing. Do not brute-force.
- Fallback Strategy: Stop after 3 failed test attempts. Output root cause and ask for human intervention/clarification.
- Self-Review: Check against Guardrails & Anti-patterns before finalizing.
- Output Constraints: Output ONLY the modified code block. Do not explain unless asked.
Definition of Done (DoD) Checklist
Anti-patterns / Pitfalls
- ⛔ Don't: Log PII, catch-all exception, N+1 queries
- ⚠️ Watch out for: Common symptoms and quick fixes
- 💡 Instead: Use proper error handling, pagination, and logging
Reference Links & Examples
- Internal documentation and examples
- Official documentation and best practices
- Community resources and discussions
Versioning & Changelog
- Version: 1.0.0
- Changelog:
- 2026-02-22: Initial version with complete template structure
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: changelog-management-33description: Changelogs document changes to software over time, helping users and Use when this capability is needed.4---56# Changelog Management78## Skill Profile9*(Select at least one profile to enable specific modules)*10- [ ] **DevOps**11- [x] **Backend**12- [ ] **Frontend**13- [ ] **AI-RAG**14- [ ] **Security Critical**1516## Overview17Changelogs document changes to software over time, helping users and developers understand what has changed. Well-maintained changelogs follow structured formats, use semantic versioning, categorize changes clearly, and provide context for breaking changes and migrations.1819## Why This Matters20- **Reduces Support Burden**: Clear change history reduces support questions and ticket volume21- **Increases Transparency**: Transparent updates build trust with users and developers22- **Lowers Communication Costs**: Faster, more consistent communication with standardized formats23- **Improves Quality**: Consistent documentation ensures users can track changes and understand impacts24- **Enables Debugging**: Version history helps identify when issues were introduced25- **Facilitates Upgrades**: Migration guides and breaking change documentation simplify upgrades2627---2829## Core Concepts & Rules3031### 1. Core Principles32- Follow established patterns and conventions33- Maintain consistency across codebase34- Document decisions and trade-offs3536### 2. Implementation Guidelines37- Start with the simplest viable solution38- Iterate based on feedback and requirements39- Test thoroughly before deployment404142## Inputs / Outputs / Contracts43* **Inputs**:44 - Software changes (features, fixes, deprecations)45 - Version information (semantic versioning)46 - Breaking change notifications47 - Migration guides48* **Entry Conditions**:49 - Version control system in place (Git)50 - Release process defined51 - Changelog format selected52* **Outputs**:53 - Changelog file updates54 - Release notes55 - Version tags56 - Migration documentation57* **Artifacts Required (Deliverables)**:58 - Changelog file (CHANGELOG.md)59 - Release notes template60 - Version tagging strategy61 - Migration guide template62* **Acceptance Evidence**:63 - Changelog follows Keep a Changelog format64 - Semantic versioning followed65 - Breaking changes clearly marked66 - Migration guides provided67* **Success Criteria**:68 - Changelog completeness > 95%69 - Semantic versioning compliance70 - Developer satisfaction score > 4.0/5.071 - Support ticket reduction > 50%7273## Skill Composition74* **Depends on**: [semantic-versioning](../01-foundations/semantic-versioning/SKILL.md), [git-workflow](../01-foundations/git-workflow/SKILL.md)75* **Compatible with**: [api-documentation](./api-documentation/SKILL.md), [technical-writing](./technical-writing/SKILL.md)76* **Conflicts with**: None (generic documentation skill)77* **Related Skills**: [system-architecture-docs](./system-architecture-docs/SKILL.md), [runbooks](./runbooks/SKILL.md)7879---8081## Quick Start / Implementation Example82831. Review requirements and constraints842. Set up development environment853. Implement core functionality following patterns864. Write tests for critical paths875. Run tests and fix issues886. Document any deviations or decisions8990```python91# Example implementation following best practices92def example_function():93 # Your implementation here94 pass95```969798## Assumptions / Constraints / Non-goals99100* **Assumptions**:101 - Development environment is properly configured102 - Required dependencies are available103 - Team has basic understanding of domain104* **Constraints**:105 - Must follow existing codebase conventions106 - Time and resource limitations107 - Compatibility requirements108* **Non-goals**:109 - This skill does not cover edge cases outside scope110 - Not a replacement for formal training111112113## Compatibility & Prerequisites114115* **Supported Versions**:116 - Python 3.8+117 - Node.js 16+118 - Modern browsers (Chrome, Firefox, Safari, Edge)119* **Required AI Tools**:120 - Code editor (VS Code recommended)121 - Testing framework appropriate for language122 - Version control (Git)123* **Dependencies**:124 - Language-specific package manager125 - Build tools126 - Testing libraries127* **Environment Setup**:128 - `.env.example` keys: `API_KEY`, `DATABASE_URL` (no values)129130131## Test Scenario Matrix (QA Strategy)132133| Type | Focus Area | Required Scenarios / Mocks |134| :--- | :--- | :--- |135| **Unit** | Core Logic | Must cover primary logic and at least 3 edge/error cases. Target minimum 80% coverage |136| **Integration** | DB / API | All external API calls or database connections must be mocked during unit tests |137| **E2E** | User Journey | Critical user flows to test |138| **Performance** | Latency / Load | Benchmark requirements |139| **Security** | Vuln / Auth | SAST/DAST or dependency audit |140| **Frontend** | UX / A11y | Accessibility checklist (WCAG), Performance Budget (Lighthouse score) |141142143## Technical Guardrails & Security Threat Model144145### 1. Security & Privacy (Threat Model)146* **Top Threats**: Injection attacks, authentication bypass, data exposure147- [ ] **Data Handling**: Sanitize all user inputs to prevent Injection attacks. Never log raw PII148- [ ] **Secrets Management**: No hardcoded API keys. Use Env Vars/Secrets Manager149- [ ] **Authorization**: Validate user permissions before state changes150151### 2. Performance & Resources152- [ ] **Execution Efficiency**: Consider time complexity for algorithms153- [ ] **Memory Management**: Use streams/pagination for large data154- [ ] **Resource Cleanup**: Close DB connections/file handlers in finally blocks155156### 3. Architecture & Scalability157- [ ] **Design Pattern**: Follow SOLID principles, use Dependency Injection158- [ ] **Modularity**: Decouple logic from UI/Frameworks159160### 4. Observability & Reliability161- [ ] **Logging Standards**: Structured JSON, include trace IDs `request_id`162- [ ] **Metrics**: Track `error_rate`, `latency`, `queue_depth`163- [ ] **Error Handling**: Standardized error codes, no bare except164- [ ] **Observability Artifacts**:165 - **Log Fields**: timestamp, level, message, request_id166 - **Metrics**: request_count, error_count, response_time167 - **Dashboards/Alerts**: High Error Rate > 5%168169170## Agent Directives & Error Recovery171*(ข้อกำหนดสำหรับ AI Agent ในการคิดและแก้ปัญหาเมื่อเกิดข้อผิดพลาด)*172173- **Thinking Process**: Analyze root cause before fixing. Do not brute-force.174- **Fallback Strategy**: Stop after 3 failed test attempts. Output root cause and ask for human intervention/clarification.175- **Self-Review**: Check against Guardrails & Anti-patterns before finalizing.176- **Output Constraints**: Output ONLY the modified code block. Do not explain unless asked.177178179## Definition of Done (DoD) Checklist180181- [ ] Tests passed + coverage met182- [ ] Lint/Typecheck passed183- [ ] Logging/Metrics/Trace implemented184- [ ] Security checks passed185- [ ] Documentation/Changelog updated186- [ ] Accessibility/Performance requirements met (if frontend)187188189## Anti-patterns / Pitfalls190191* ⛔ **Don't**: Log PII, catch-all exception, N+1 queries192* ⚠️ **Watch out for**: Common symptoms and quick fixes193* 💡 **Instead**: Use proper error handling, pagination, and logging194195196## Reference Links & Examples197198* Internal documentation and examples199* Official documentation and best practices200* Community resources and discussions201202203## Versioning & Changelog204205* **Version**: 1.0.0206* **Changelog**:207 - 2026-02-22: Initial version with complete template structure208209---210> Converted and distributed by [TomeVault](https://tomevault.io/claim/amnadtaowsoam) — claim your Tome and manage your conversions.211<!-- tomevault:4.0:skill_md:2026-04-13 -->