Publish Npm Version

Publish next npm version

Audience

Maintainers who can push branches and open PRs. Invoke this locally, not as a

GitHub Action — a PR opened by a workflow's GITHUB_TOKEN does not trigger CI,

which defeats the point of a reviewable release.

Background reading

Read docs/oss/versioning.md first — it is the

policy this skill mechanises: the root-package.json source of truth, the

lockstep guarantee, the dist-tag convention, and the full procedure (this skill

is the "open the bump PR" step; merging the PR is the publish trigger — there

is no separate dispatch step).

Pre-flight

Confirm you can fetch from origin (git fetch origin main succeeds). The skill

works in a fresh worktree off origin/main, so your current worktree is left

undisturbed.

Steps

• Fresh worktree off origin/main:

   git fetch origin main
   git worktree add -b chore/release-vNEXT ../release-vNEXT origin/main
   cd ../release-vNEXT
   pnpm install --frozen-lockfile

• Bump. pnpm bump-minor reads the root version at HEAD, computes the next

minor (0.2.0 → 0.3.0), stamps every workspace package.json in

lockstep (rewriting internal workspace: deps to the new version), and

regenerates pnpm-lock.yaml to match.

• Sanity-check the bump is clean and complete. The diff must include

pnpm-lock.yaml — CI installs with --frozen-lockfile, so a bump without the

lockfile fails every CI job at the install step:

   git diff --stat                      # every workspace package.json + pnpm-lock.yaml
   pnpm check:publish-deps              # no workspace:/catalog: leaks, exact internal pins

• Commit with the release title and dual DCO sign-off, then push and open the PR:

   git commit -am "chore(release): v<version>"
   git push -u origin chore/release-vNEXT
   gh pr create --base main --title "chore(release): v<version>" \
     --body "Release v<version>. Merging this triggers the Publish to npm workflow."

• Hand off. Tell the maintainer the PR is open and that merging it ships

<version> to npm under latest (via OIDC trusted publishing) and cuts a

GitHub Release with auto-generated notes. Do not merge it yourself unless asked.

What this skill does NOT do

• Patches / old minors. There are no patch releases of older minors

(versioning.md § pre-1.0). This skill only advances the latest minor.

• The publish itself. That is the Publish to npm workflow, triggered by the

merge — never run pnpm publish by hand for a normal release.

• Release notes authoring. The GitHub Release notes are auto-generated

(gh release create --generate-notes) by the workflow; there is no committed

release-notes file to write.