github-release

GitHub Release Skill

Critical Rules

NEVER run gh release create or gh release delete.

These commands are blocked by hooks. GitHub immutable releases (GA Oct 2025) make tag names permanent — a lightweight tag created by gh release create burns that tag name forever with no recovery path. CI handles release creation from signed tags.

gh release edit is allowed ONLY for --notes / --notes-file to overhaul the release description after CI publishes. All other gh release edit flags are blocked.

Release Flow

1. Detect ecosystem — identify version files for the project type (see references/ecosystem-detection.md)
2. Determine next version — based on conventional commits or user input (major/minor/patch)
3. Bump version files — update all ecosystem-specific version files consistently
4. Update CHANGELOG.md — add release section with date and changes
5. Create release branch and PR — release/vX.Y.Z branch, open PR for review (always use a PR — branch protection typically blocks direct pushes)
6. After PR merge — git checkout main && git pull, assert HEAD equals the fetched remote tip (stale-worktree guard; abort on mismatch), then tag main's HEAD, never the release/vX.Y.Z branch tip: git tag -s vX.Y.Z -m "vX.Y.Z" — see references/release-process.md Phase 3.
7. Push tag — git push origin vX.Y.Z triggers CI workflow
8. CI publishes release — with artifacts, checksums, and auto-generated release notes
9. Overhaul release description — rewrite auto-generated notes into a narrative summary; add a Contributors section crediting code authors + issue reporters (bots filtered) via scripts/harvest-contributors.sh; apply with gh release edit vX.Y.Z --notes-file notes.md
10. Do NOT re-run the release workflow after step 9 — many workflows (e.g. softprops/action-gh-release) regenerate the body each run and will overwrite the overhaul. For downstream retries (TER publish, artifact upload), use a dedicated dispatcher workflow — see references/ter-republish.md.

Commands

• /release — full release flow (detect, bump, PR, tag)
• /release-prepare — bump versions and open PR only (no tag)
• /release-status — check release health (version drift, unsigned tags, missing workflows)

Delegation

• Supply chain security (SLSA, SBOMs, attestations): delegate to enterprise-readiness skill
• Branch strategy and conventional commits: delegate to git-workflow skill

References

• references/release-process.md — complete flow documentation
• references/ecosystem-detection.md — version file patterns per ecosystem
• references/immutable-releases.md — GitHub immutable releases and tag burning
• references/supply-chain-security.md — SLSA, Sigstore, SBOMs, attestations
• references/recovery-procedures.md — burned tags, stuck drafts, version drift, release-body clobbering, branch-protection gotchas
• references/ter-republish.md — TYPO3 TER re-publish patterns
• references/typo3-ter-publishing.md — TYPO3 initial-publish gotchas (tag/ext_emconf.php version match, v-prefix handling)
• references/ci-workflow-templates.md — CI workflow structure and templates