generate-release-ag

What problem does it solve?

It prevents risky, inconsistent release operations by enforcing a guarded, end-to-end workflow that bumps versions correctly, generates a complete CHANGELOG from the exact commit range, and creates a single release PR without tagging or publishing prematurely.

Core Features & Use Cases

• Security-first verification (Phase 0): Runs dependency audit, CodeQL high-severity checks, and Dependabot alerts, and stops until high/critical findings are addressed.
• Release branch + version parity (Phases 1–3): Ensures work happens on release/vX.Y.Z, uses PATCH-only versioning rules (including the .999 threshold), and keeps branch and package.json versions aligned.
• Complete CHANGELOG generation (Phase 1): Builds a fully covered, emoji-grouped CHANGELOG section using every commit since the last tag, enriches PR metadata, and credits contributors with proper thanks/co-authors; includes coverage assertions to catch missed commits.
• Atomic quality gate + PR stop points: Runs lint, typecheck, cycle checks, docs sync/all checks, and tests; then halts for user confirmation before deployment, tagging, and publishing.

Quick Start

Run the generate-release-ag skill to create a guarded release PR for OmniRoute that bumps the patch version, regenerates the complete CHANGELOG from commits since the last tag, and stops before deployment and tagging until you confirm.