Release Manager

name: Release
on:
  push:
    tags: ['v*']

permissions:
  contents: write
  packages: write

jobs:
  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        node-version: [18, 20, 22]
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with: { node-version: '${{ matrix.node-version }}' }
      - run: npm ci && npm test

  publish:
    needs: test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with: { node-version: 20, registry-url: '[external resource]' }
      - run: npm ci && npm run build && npm publish
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

  github-release:
    needs: publish
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with: { clone-depth: 0 }
      - uses: softprops/action-gh-release@v2
        with: { generate_release_notes: true }

name: Build Binaries
on:
  push:
    tags: ['v*']

jobs:
  build:
    strategy:
      matrix:
        include:
          - { os: ubuntu-latest, target: x86_64-unknown-linux-gnu, artifact: project-linux-amd64 }
          - { os: ubuntu-latest, target: aarch64-unknown-linux-gnu, artifact: project-linux-arm64 }
          - { os: macos-latest, target: x86_64-apple-darwin, artifact: project-darwin-amd64 }
          - { os: macos-latest, target: aarch64-apple-darwin, artifact: project-darwin-arm64 }
          - { os: windows-latest, target: x86_64-pc-windows-msvc, artifact: project-windows-amd64.exe }
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v4
      - run: cargo build --release --target ${{ matrix.target }}
      - uses: actions/upload-artifact@v4
        with: { name: '${{ matrix.artifact }}', path: 'target/${{ matrix.target }}/release/project*' }

  release:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/download-artifact@v4
      - run: sha256sum project-*/* > checksums.txt
      - uses: softprops/action-gh-release@v2
        with:
          files: |
            project-*/*
            checksums.txt

main (stable)
  │
  ├── release/2.1.0 (branch when feature-complete)
  │     ├── fix: last-minute bug fix
  │     └── tag: v2.1.0 (merge to main and develop)
  │
  develop (integration)
  ├── feature/new-api
  └── feature/performance

#!shell-interpreter
set -euo pipefail
VERSION=$1; BRANCH="release/${VERSION}"

echo "=== Release ${VERSION} ==="
git diff --quiet || { echo "ERROR: Uncommitted changes"; exit 1; }
npm test || { echo "ERROR: Tests failing"; exit 1; }

git checkout -b "${BRANCH}" develop
npm version "${VERSION}" --no-git-tag-version
echo "Update CHANGELOG.md, then press Enter"
read -r

git add -A && git commit -m "chore: bump version to ${VERSION}"
npm test

echo "Branch '${BRANCH}' ready."
echo "  1. Push and create PR to main"
echo "  2. Tag merge commit: git tag v${VERSION}"
echo "  3. Push tag: git push origin v${VERSION}"
echo "  4. Merge main back to develop"

# [Project] v2.1.0 Released

## Highlights
- **Configuration Hot-Reloading** (#234): Modify config without restart
- **TOML Support** (#241): Use TOML in addition to JSON and YAML

## Upgrading
add the package dependency project@2.1.0
No breaking changes. See full changelog: [link]

## Contributors
Thanks to @user1, @user2, @user3

## When to Rollback
- Critical security vulnerability, data corruption, major regression

## Steps
1. Communicate: "We are aware of [issue] and rolling back."
2. Deprecate: npm deprecate project@2.1.0 "Use 2.0.3 instead"
3. Publish rollback version
4. Post-mortem: what went wrong, process improvements
5. Fix-forward with new patch release

{
  "name": "project-name",
  "version": "2.1.0",
  "files": ["dist/", "LICENSE", "README.md"],
  "main": "dist/index.js",
  "types": "dist/index.d.ts",
  "engines": { "node": ">=18" },
  "publishConfig": { "access": "public" }
}

npm pack --dry-run          # Check included files
npm publish --dry-run       # Verify publish would succeed

# pyproject.toml
[build-system]
requires = ["hatchling"]
build-backend = "hatchling.build"

[project]
name = "project-name"
version = "2.1.0"
requires-python = ">=3.9"
license = {text = "MIT"}

# GitHub Actions for PyPI
- name: Build package
  run: python -m build
- name: Publish to PyPI
  uses: pypa/gh-action-pypi-publish@release/v1
  with:
    password: ${{ secrets.PYPI_TOKEN }}

## Release Manager Analysis

### Assessment
[Key findings and observations]

### Recommendations
1. [Primary recommendation]
2. [Secondary recommendation]
3. [Additional suggestions]

### Action Items
- [ ] [First action step]
- [ ] [Second action step]
- [ ] [Follow-up task]