AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Release Patch

skill-aldianriski-lean-flow-release-patch · by aldianriski

Use when releasing a patch on any project — auto-detects the manifest (plugin / npm / python / cargo / go / flat), or falls back to a changelog-only entry when no manifest exists; bumps the PATCH version, prepends a CHANGELOG entry, then HARD STOPS before push. Skips the bump entirely if only docs changed. Never runs git push; emits a ready-to-push message and exits. Self-contained.

No reviews yet
0 installs
9 views
0.0% view→install

Install

$ agentstack add skill-aldianriski-lean-flow-release-patch

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-aldianriski-lean-flow-release-patch)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Release Patch? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

release-patch

Patch-release orchestrator. Auto-detects the project type via a manifest cascade. The last step is a hard human gate before push — this skill never pushes.

When to invoke

  • A bug fix or hotfix has landed and you need a PATCH bump + changelog.

Do not use for MINOR (new feature/skill) or MAJOR (breaking) bumps — those are governance decisions; bump those manifests by hand with an explicit changelog entry.

At sprint close the close step routes here only for a fixes-only sprint (PATCH); a sprint that shipped new capabilities is a MINOR by-hand bump (it scans plan_commit..HEAD to tell — see step 1).

Mode-detection cascade

First match wins. Priority: plugin > npm > python > cargo > go > flat.

| Detected file | Mode | Bump target | |---|---|---| | .claude-plugin/plugin.json | plugin | lockstep with marketplace.json (both must stay equal) | | package.json | npm | version field | | pyproject.toml | python | [project] or [tool.poetry] version | | Cargo.toml | cargo | [package] version | | go.mod | go | tag-based — prompt the user for the tag string | | VERSION (flat file) | flat | overwrite with the new semver | | none of the above | changelog-only | no manifest — prepend a dated CHANGELOG entry, no version bump (see below) |

Steps

  1. Diff scangit diff --name-only HEAD~1 HEAD (or HEAD if uncommitted). At sprint close → scan the whole sprint range plan_commit..HEAD (read plan_commit from the just-closed sprint frontmatter) — else a multi-commit sprint is misjudged by its docs-only close commit. If every changed path is under docs/, abort: [skip] docs-only diff — no version bump. Exit.
  2. Mode detect — run the cascade; save the mode + manifest path(s). No manifest → changelog-only mode (below); do not exit.
  3. PATCH bump — increment the patch digit per mode. Plugin: verify both files are equal, then bump both. Single-manifest modes: read → bump → write. Go: prompt for the tag string.
  4. CHANGELOG entry — detect docs/CHANGELOG.md (canonical placement, DOCS_Guide §2), else CHANGELOG.md / CHANGES.md / HISTORY.md at the repo root (default docs/CHANGELOG.md). Prepend a new block matching the file's existing entry shape; if empty/missing, use Keep-a-Changelog format.
  5. Stale-doc clear — any doc with last_updated: frontmatter that appears in the diff → bump it to today (yyyy-MM-dd).
  6. HARD STOP — push gate — emit the message below and exit (if docs/DEPLOY.md exists, point to it for the push / deploy / verify / rollback steps). This skill never invokes git push.
=== READY TO PUSH ===
Mode:    
Version:  → 
Run manually: git push origin 
Deploy steps: docs/DEPLOY.md (push · verify · rollback — owned there, if present)
=====================

Output format

=== RELEASE-PATCH ===
[mode]      
[diff]       files changed
[bump]      : 2.3.0 → 2.3.1  (both paths if plugin)
[changelog] entry prepended for v2.3.1
[stale]      docs touched; last_updated bumped
[push]      HARD STOP — manual git push required
======================

Changelog-only mode (no manifest)

When the cascade finds no version manifest, there is nothing to bump — but a code change still deserves a CHANGELOG line. So instead of skipping outright:

  1. The step-1 docs-only abort still wins — a docs-only diff exits there (nothing to log).
  2. For a code diff: prepend a dated entry to docs/CHANGELOG.md (Keep-a-Changelog; a [YYYY-MM-DD] or Unreleased block), no version line, no bump.
  3. Emit the push gate with Version: n/a (changelog-only) and exit. Still never pushes.

Gives manifestless repos (no package.json / VERSION / etc.) the changelog value without inventing a version scheme they don't use.

Examples

  • Flat VERSIONcat VERSION1.4.2; bump → write 1.4.3; prepend the v1.4.3 block to docs/CHANGELOG.md; emit the push gate (Version: 1.4.2 → 1.4.3).
  • Changelog-only (no manifest, code diff) — cascade finds nothing; prepend a dated docs/CHANGELOG.md entry summarising the change; emit the push gate (Version: n/a (changelog-only)).

Constraints

  • Plugin lockstep: plugin.json + marketplace.json versions MUST stay equal — never bump one without the other.
  • CHANGELOG format follows the detected file's existing entries verbatim — never invent a new shape.
  • The push gate is a hard text emit; exit immediately after.
  • Run the cascade every invocation — never hardcode the mode.

Red flags

Bumping plugin.json without marketplace.json (or vice versa) — breaks the lockstep contract. ❌ Skipping the diff check — noisy version churn for docs-only commits. ❌ MINOR / MAJOR bumps — out of scope; those are governance-level decisions. ❌ Invoking git push — the skill stops at the gate, always.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.