release-process

Validates, publishes, and verifies npm package releases through GitHub Actions workflows.

Updated Jun 2, 2026
One-click install
npx skills add https://github.com/codebytes/btt --skill release-process-codebytes
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: release-process
Source: https://github.com/codebytes/btt/tree/main/.squad/templates/skills/release-process
Command: npx skills add https://github.com/codebytes/btt --skill release-process-codebytes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Releasing npm packages from a monorepo often fails due to workspace dependency leaks, 2FA hangs, draft releases that never trigger publish workflows, and version drift between root and sub-package manifests. This Skill encodes the pre-release validation, publish, and post-publish verification procedures that prevent those failures. ## Core Features & Use Cases - Pre-Publish Validation: Scans every packages/*/package.json for file:, link:, and absolute-path dependency references before any release is tagged. - Correct Publish Procedure: Enforces publishing from inside each package directory with npm publish --access public, never via npm -w which hangs silently with 2FA. - Fallback & Recovery: Defines a one-retry-then-local-publish fallback when workflow_dispatch fails, plus a manual gh workflow run workaround for the GITHUB_TOKEN event propagation limitation. - Post-Publish Smoke Test: Verifies the published CLI with npm install -g, version check, and doctor command in a clean shell. - Use Case: Before promoting dev to main for the @bradygaster/squad-cli release, run the checklist to confirm CHANGELOG.md has a versioned section, all three package.json files share the same semver version, and no draft GitHub Releases exist. ## Quick Start Ask the agent to run the release checklist and validate the repository is ready to publish version X.Y.Z of the npm packages.

Frequently Asked Questions about release-process

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I publish npm workspace packages without hanging?

Publish npm workspace packages by running cd into each package directory and executing npm publish --access public. Never use npm -w for publishing because it hangs silently when the account has 2FA enabled, producing no error output.

How do I check package.json for workspace dependency leaks before release?

Scan all packages/*/package.json files with grep -r '"file:\|"link:\|"/' to detect file: references, link: references, and absolute paths. If anything matches, stop the release and fix the reference before tagging.

Why doesn't my GitHub Release trigger the npm publish workflow?

A release created with the default GITHUB_TOKEN does not fire the release: published event for downstream workflows, by GitHub design. Work around it by running gh workflow run squad-npm-publish.yml --ref main -f version=X.Y.Z, or use a PAT or GitHub App token.

Why does the release workflow fail on CHANGELOG validation?

The release workflow reads the version from the root package.json and requires a matching ## [$VERSION] section in CHANGELOG.md. Convert [Unreleased] to [$VERSION] - YYYY-MM-DD and bump all package.json files together before promoting to main.

What npm token type should CI use for publishing?

CI must use an npm Automation token for publishing. User tokens with auth-and-writes 2FA cause silent hangs or EOTP errors in non-interactive environments, blocking the publish workflow without a clear error.

When should the coordinator not run npm publish?

The coordinator never runs npm publish, triggers release workflows, or makes release decisions; the project owner owns the release trigger. If asked to publish, the correct action is to escalate to the project owner.