Skip to content
Back to skills

Release Process

ASecurity

Cuts a release with basicly release, pushes it and confirms it published. Use when cutting, tagging or checking a release.

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 5, 2026
developmentpythongonodegitsecurity

Security analysis

A100/100

Pro scans all 3 files and shows the line behind each finding

Scanned November 5, 2026

npx -y skills add niksavis/handily --skill release-process --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Release Process?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Release Process
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/niksavis-release-process/badge)](https://www.skillsdirectory.com/skills/niksavis-release-process)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: release-process
description: Cuts a release with basicly release, pushes it and confirms it published. Use when cutting, tagging or checking a release.
---
<!-- Generated by `basicly skills-build` from skill.yaml. Do not edit; edit the source. -->

# Release Process

Cut a release with `basicly release`, which does every step up to the annotated tag. You choose the version, write the summary and push.

## Rules

- **Confirm that this repository releases with `basicly release` first.** The skill ships to every repository that installs basicly, also to one with its own release process.
- **Never do by hand a step that `basicly release` does.** The command checks every precondition before the first write and restores the tree when a later step fails.
- **Write the notes before the cut.** The release commit and the tag are one step, so a later commit never reaches the tagged notes.
- **Never clear a refusal by a manual run of the named tool.** That records a witness for a check that the gate did not see pass.
- **Never delete a changelog fragment to clear a refusal.** A release note must not disappear without notice.
- **The command never pushes.** Push only when the user release request includes publication.

## 1. Check that the repository uses it

```sh
ls changelog.d/ 2>/dev/null; grep -n "## \[Unreleased\]" CHANGELOG.md
```

If either is missing, stop and follow the repository's own release document.

## 2. Write the notes

- Each change leaves its entry in `changelog.d/<record-id>.<category>.md`. The categories are `added`, `changed`, `deprecated`, `removed`, `fixed` and `security`. One file per change means that two lanes never collide on one anchor.
- A hand-written body under `## [Unreleased]` also publishes, beside the fragments.
- Write a summary under `## [Unreleased]`, above its first `###` heading. Write one paragraph on what the release changes for a user, then themed bullets. Name the record id of a fragment in each highlight.

The release folds each fragment into `## [Unreleased]` under its Keep a Changelog heading, sorted by category and then by file name. It moves that body into the dated `## vX.Y.Z - <date>` section, deletes the fragments in the same commit, and leaves `[Unreleased]` empty.

## 3. Wait for green CI

Cut only from a commit whose CI run on the release branch passed. A red or still running build is a stop.

## 4. Choose the version and run the dry run

Choose major, minor or patch yourself. The command refuses a version that does not move forward, but it does not choose one.

```sh
uv run basicly release <version> --issue <record-id> --dry-run
```

The dry run writes nothing and reports every refusal at once, each with the file or value it names. [refusals](references/refusals.md) lists them.

A page under `docs/tutorial/` that names the current version as the one it was recorded against is rewritten to the new version by the release. A page that names any other version refuses: walk it against a build of this checkout and fix it first.

The dry run assembles the release in a temporary checkout and runs its actual commit hooks. It reports failing gates or the verify runner's gate count without changing this checkout. It copies the prepared Python environment and uses the same hook configuration. Find out whether the tag workflow runs the full checks before publication; when it does not, run required full checks on the release commit before pushing the tag.

## 5. Cut the release

```sh
uv run basicly release <version> --issue <record-id>
```

It bumps `__version__`, regenerates the projections, rewrites the `vX.Y.Z` install pins in `README.md` and the other pin files, assembles the changelog, commits and creates the annotated tag. Add `--date YYYY-MM-DD` to set the changelog date. The default is today.

The user release request authorizes the requested cut and publication. No L-level grant or mandatory budget is needed.
Required release gates must still pass. Use `--shipping <node>` when the verified shipping node differs from the root.
Keep publication inside the version and scope the user requested.

## 6. Push and confirm

Run the two commands that the release prints:

```sh
git push origin main
git push origin vX.Y.Z
```

When a workflow publishes from the tag push, it reads `CHANGELOG.md` from the tagged commit. Confirm that the workflow run is green and that the release page matches the summary. Never edit the release page after publication. A page that disagrees with its changelog section is a defect.

When a tag push is blocked by the Claude auto-mode classifier, read [auto-mode](references/auto-mode.md).

Files in this skill

  • SKILL.md4.5 KB
  • references/auto-mode.md1.5 KB
  • references/refusals.md1.1 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.