Source profileQuality 86/100Review permissions

dyoshikawa/rulesync/.rulesync/skills/goal-release/SKILL.md

goal-release

Cut a release end to end: use the `draft-release` skill to open the release PR and draft GitHub release, wait for CI to turn green, run the `merge-pr` skill to merge the release PR, then update the Homebrew formula from the published release assets. Use when the user wants to draft and merge a release in one go, or triggers on "the `goal-release` skill".

Source repository stars
1,263
Declared platforms
0
Static risk flags
1
Last source update
2026-07-28
Source checked
2026-07-28

Decision brief

What it does—and where it fits

newversion = the user's request

Best for

  • Use when the user wants to draft and merge a release in one go, or triggers on "the `goal-release` skill".

Not for

  • Tasks that require unconfirmed production actions or broad system permissions.
  • Environments where the pinned source and install steps cannot be inspected.

Compatibility matrix

Platform support, with evidence labels

PlatformStatusEvidenceWhat to check
CodexNot declaredNo explicit evidencePortability before use
Claude CodeNot declaredNo explicit evidencePortability before use
CursorNot declaredNo explicit evidencePortability before use
Gemini CLINot declaredNo explicit evidencePortability before use
Open the compatibility checker

Installation

Inspect first. Install second.

The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.

Source-detected install commandSource
npx skills add https://github.com/dyoshikawa/rulesync --skill ".rulesync/skills/goal-release"
Safe inspection promptEditorial

Inspect the Agent Skill "goal-release" from https://github.com/dyoshikawa/rulesync/blob/310b711fbe8cffc14debb276ade8a384c2b89083/.rulesync/skills/goal-release/SKILL.md at commit 310b711fbe8cffc14debb276ade8a384c2b89083. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.

Workflow

What the source asks the agent to do

  1. 01

    1. Draft the Release

    Use the draft-release skill with newversion.

    If newversion is provided (e.g. v1.2.3 or 1.2.3), it must match theIf newversion is empty, pass no argument; the draft-release skill determines thecreated a release/v branch with the version-bump commits,
  2. 02

    2. Resolve the Release PR

    Use the PR number or URL that the draft-release skill's gh pr create printed in Step 1 when available. Otherwise, identify the pull request from the current release/v branch:

    Use the PR number or URL that the draft-release skill's gh pr create printed in Step 1 when available. Otherwise, identify the pull request from the current release/v branch:Confirm that headRefName matches the release/v branch created in Step 1. This skill must only ever merge that release PR — if the resolved PR is a different one, stop and report to the user instead of merging.
  3. 03

    3. Wait for CI

    Wait for the release PR's GitHub Actions checks to finish:

    If every check passes, proceed to Step 4.If a check fails, investigate and fix the failure on the release branchFixes must legitimately resolve the failure. Never make a check green by
  4. 04

    4. Merge the Release PR

    Use the merge-pr skill with the release PR number. It re-verifies the PR state and CI status, merges with gh pr merge --admin --merge, posts a thank-you comment, and cleans up the local branch.

    Use the merge-pr skill with the release PR number. It re-verifies the PR state and CI status, merges with gh pr merge --admin --merge, posts a thank-you comment, and cleans up the local branch.Note: the goal-pr skill tells agents not to auto-merge PRs that touch package.json or release configuration. That restriction does not apply here — merging the version-bump release PR is this skill's explicit purpose, a…
  5. 05

    5. Update the Homebrew Formula

    After the release PR merges, the Publish Assets workflow builds the platform binaries, tags the release, and uploads the assets (including SHA256SUMS) to the draft GitHub release. The Homebrew formula embeds those checksums, so it can only be regenerated once that workflow finis…

    Wait for the Publish Assets run triggered by the merge to complete:Wait until the GitHub release is published (no longer a draft). TheRegenerate the formula from the released checksums:

Permission review

Static risk signals and limitations

Runs scripts

medium · line 125

The documentation asks the agent to run terminal commands or scripts.

git checkout main && git pull

Runs scripts

medium · line 127

The documentation asks the agent to run terminal commands or scripts.

pnpm exec tsx scripts/generate-homebrew-formula.ts <version> ./tmp/SHA256SUMS Formula/rulesync.rb

Evidence record

Why each signal appears

EvidenceSourceComputedTestedEditorial
SignalValueEvidence typeMeaning
Quality score86/100ComputedDocumentation, specificity, maintenance, and trust rules
Repository stars1,263SourceRepository attention, not individual Skill quality
Compatibility0 platformsSourceDeclared in the catalog source record
Usage guideautomated source guideEditorialGenerated or reviewed according to the visible evidence level

Pinned source

Provenance and original SKILL.md

Repository
dyoshikawa/rulesync
Skill path
.rulesync/skills/goal-release/SKILL.md
Commit
310b711fbe8cffc14debb276ade8a384c2b89083
License
MIT
Collected
2026-07-28
Default branch
main
View the original SKILL.md

Goal Release

new_version = the user's request

This skill drives a release all the way to merge. It uses the draft-release skill to open the release pull request (and create the draft GitHub release), waits for the PR's CI checks to pass, runs the merge-pr skill to merge it, and finally updates the Homebrew tap formula once the release assets are built.

1. Draft the Release

Use the draft-release skill with new_version.

  • If new_version is provided (e.g. v1.2.3 or 1.2.3), it must match the semver shape ^v?\d+\.\d+\.\d+$ — if it does not, stop and report instead of passing it on. Pass a valid value through unchanged; the draft-release skill normalizes the v prefix itself.
  • If new_version is empty, pass no argument; the draft-release skill determines the next version automatically via the release-dry-run skill.

When the draft-release skill finishes, it has:

  • created a release/v<version> branch with the version-bump commits,
  • opened a pull request against main, and
  • created a draft GitHub release v<version> with the release notes.

If the draft-release skill failed partway (e.g. the PR exists but the draft release was not created, or it stopped before opening the PR), stop here and report the partial state to the user instead of continuing.

2. Resolve the Release PR

Use the PR number or URL that the draft-release skill's gh pr create printed in Step 1 when available. Otherwise, identify the pull request from the current release/v<version> branch:

gh pr view --json number,title,state,headRefName

Confirm that headRefName matches the release/v<version> branch created in Step 1. This skill must only ever merge that release PR — if the resolved PR is a different one, stop and report to the user instead of merging.

3. Wait for CI

Wait for the release PR's GitHub Actions checks to finish:

gh pr checks <pr_number> --watch

If the watch reports that no checks are registered yet, wait a moment and retry — checks can take a few seconds to appear right after the PR is opened.

  • If every check passes, proceed to Step 4.
  • If a check fails, investigate and fix the failure on the release branch (run pnpm cicheck locally, commit, and push), then wait for the re-run. Never proceed to the merge while any check is fail or pending.
  • Fixes must legitimately resolve the failure. Never make a check green by skipping or deleting tests, weakening lint or type-check configuration, or editing GitHub Actions workflows.
  • Set a safety cap of 3 fix attempts. If CI is still red after the cap, stop and report the failing checks to the user instead of merging.

If any fix commit beyond the draft-release skill's own version-bump commits was pushed, stop before merging and report the extra commits to the user for confirmation. The release PR must reach the merge step containing only reviewed, expected content.

4. Merge the Release PR

Use the merge-pr skill with the release PR number. It re-verifies the PR state and CI status, merges with gh pr merge --admin --merge, posts a thank-you comment, and cleans up the local branch.

Note: the goal-pr skill tells agents not to auto-merge PRs that touch package.json or release configuration. That restriction does not apply here — merging the version-bump release PR is this skill's explicit purpose, and the user opted into it by invoking the goal-release skill.

5. Update the Homebrew Formula

After the release PR merges, the Publish Assets workflow builds the platform binaries, tags the release, and uploads the assets (including SHA256SUMS) to the draft GitHub release. The Homebrew formula embeds those checksums, so it can only be regenerated once that workflow finishes — this step replaces the old homebrew job that .github/workflows/publish.yml used to run.

  1. Wait for the Publish Assets run triggered by the merge to complete:

    gh run list --workflow "Publish Assets" --branch "release/v<version>" \
      --limit 1 --json databaseId,status,conclusion,headBranch
    gh run watch <run_id>
    

    The workflow triggers on every closed PR to main (non-release runs are job-level skipped but still listed), so filter by the release branch as shown. The run can take a few seconds to appear right after the merge — if the list is empty, wait and retry. Confirm the watched run belongs to this release (its headBranch is the release/v<version> branch of the PR merged in Step 4) and concluded with success. If it failed, stop and report — the formula must not be regenerated from stale assets.

  2. Wait until the GitHub release is published (no longer a draft). The Publish workflow (.github/workflows/publish.yml) runs after Publish Assets, publishes the npm package, and then flips the release public. Draft-release asset URLs return 404 for unauthenticated users, and the Homebrew tap serves the formula straight from main, so merging the formula before the release is public would break brew install for everyone:

    gh release view v<version> --json isDraft --jq .isDraft
    

    Poll until this prints false. If the Publish workflow failed (e.g. npm publish error) and the release stays a draft, stop and report instead of updating the formula.

  3. Regenerate the formula from the released checksums:

    git checkout main && git pull
    gh release download v<version> --pattern SHA256SUMS --dir ./tmp --clobber
    pnpm exec tsx scripts/generate-homebrew-formula.ts <version> ./tmp/SHA256SUMS Formula/rulesync.rb
    rm -f ./tmp/SHA256SUMS
    
  4. If git diff --quiet -- Formula/rulesync.rb reports no change, the formula is already up to date — skip ahead to the final report.

  5. Otherwise commit the regenerated formula on a branch and merge it right away (main is branch-protected, so the change must land via a PR; merging it immediately with admin rights is this skill's explicit purpose, same as the release PR itself):

    git switch -c homebrew-formula/v<version>
    git add Formula/rulesync.rb
    git commit -m "chore: update Homebrew formula to v<version>"
    git push -u origin homebrew-formula/v<version>
    gh pr create --base main --title "chore: update Homebrew formula to v<version>" \
      --body "Automated formula update for the v<version> release."
    gh pr merge --admin --merge --delete-branch
    

    If a previous attempt already pushed the homebrew-formula/v<version> branch or opened its PR, reuse them instead of failing: force-push the branch with git push --force-with-lease and skip gh pr create when gh pr list --head homebrew-formula/v<version> shows an open PR.

    Only Formula/rulesync.rb may be committed here. If anything else shows up in git status, stop and report instead of committing it.

6. Final Report

Report to the user:

  • The merged release PR number and title.
  • The new version and a link to the GitHub release (published automatically by the Publish workflow, which Step 5 waits for).
  • Whether the Homebrew formula was updated (and the formula PR number) or was already up to date.
  • Any CI fixes that were needed along the way.

Alternatives

Compare before choosing

Computed 9737,126

github/awesome-copilot

geofeed-tuner

Use this skill whenever the user mentions IP geolocation feeds, RFC 8805, geofeeds, or wants help creating, tuning, validating, or publishing a self-published IP geolocation feed in CSV format. Intended user audience is a network operator, ISP, mobile carrier, cloud provider, hosting company, IXP, or satellite provider asking about IP geolocation accuracy, or geofeed authoring best practices. Helps create, refine, and improve CSV-format IP geolocation feeds with opinionated recommendations beyon

Computed 9531,966

K-Dense-AI/scientific-agent-skills

simpy

Build, inspect, test, and analyze bounded process-based discrete-event simulations with SimPy, including events, resources, interrupts, monitoring, replications, warm-up, and reproducible output analysis.

Computed 9337,126

github/awesome-copilot

mcp-implementation-security-review

Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema validation, official-SDK usage, RCE vectors, and the OWASP MCP Top 10 — producing a report with file/line evidence. Use this skill when: - Reviewing an MCP server implementation for security before release - Checking a server against the baseline controls (MCP-01 to MCP-05) and the OWASP MCP Top 10 - Auditing

Computed 9237,126

github/awesome-copilot

github-release

Guides IA through releasing a new version of a GitHub library end-to-end. Handles SemVer versioning and Keep a Changelog formatting automatically.