A release procedure for shipping a new version of the Qaio app. It updates the shared version number, writes release notes when needed, creates a version tag, and pushes the release for the automated build process.

Use it to prepare patch releases, or minor releases after explicit approval, including version updates, release notes, commits, tags, and pushes to the repository.

It keeps all packages on the same version and makes release changes consistent. It stops at a draft so the user can publish the release manually.

release — Skill for Claude Code and Codex by akiotanaka847

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo

git clone --depth 1 https://github.com/akiotanaka847/qaio-desktop

agentmods

npx agentmods add skills/akiotanaka847/qaio-desktop/release

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/akiotanaka847/qaio-desktop/release/github.svg)](https://agentmods.dev/skills/akiotanaka847/qaio-desktop/release)

Your own site

<a href="https://agentmods.dev/skills/akiotanaka847/qaio-desktop/release"><img src="https://agentmods.dev/badge/skills/akiotanaka847/qaio-desktop/release/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/akiotanaka847/qaio-desktop/release"><img src="https://agentmods.dev/badge/skills/akiotanaka847/qaio-desktop/release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 47 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,258 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin 91% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00047	$0.01258
Opus 5	$0.00023	$0.00629
Sonnet 5	$0.00009	$0.00252
Haiku 4.5	$0.00005	$0.00126

Measured 8d ago against content hash 48caf147d342, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

91% identical to release — 27 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/release/SKILL.md · 86 lines

How it starts

The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/release

Version. Bump. Tag. Push. Done.

Versioning

All packages share ONE version. Every release bumps ALL.

Semver 0.x.y
Default: patch bump (0.3.0 → 0.3.1). Do this always unless told otherwise.
Minor bump (0.3.x → 0.4.0) needs explicit user permission. Never bump minor on own. Suggest: "This might warrant 0.4.0 — want minor?" Wait for approval.
No rush to 1.0. FastAPI was 0.x for years in prod. Same energy.

Standard flow (CI/CD)

./scripts/version.sh 0.3.X          # bump all package.json + Cargo.toml

# REQUIRED for any user-visible release: write the notes file BEFORE
# tagging. CI reads `.github/release-notes/<version>.md` verbatim and
# uses it as the GitHub release body. Skip only for trivial hotfixes
# (CI then auto-generates from conventional-commit subjects, which is
# weak signal for end users). See `.github/release-notes/README.md`
# for what good notes look like + an example at `.../0.4.0.md`.
$EDITOR .github/release-notes/0.3.X.md

git add -A && git commit -m "release: v0.3.X"
git tag v0.3.X
git push origin main --tags

GH Actions (.github/workflows/release.yml) takes over:

Builds qaio-engine for BOTH aarch64-apple-darwin AND x86_64-apple-darwin
Builds Tauri app w/ --target universal-apple-darwin (one fat .app)
Signs w/ Apple Developer ID ($APPLE_SIGNING_IDENTITY)
Notarizes .app w/ Apple
Creates signed .dmg
Verifies engine sidecar is lipo'd fat (arm64 + x86_64 both present)
Generates latest.json w/ darwin-aarch64* AND darwin-x86_64* keys
Creates draft GH Release w/ all artifacts

One DMG covers Apple Silicon + Intel. See knowledge-base/production-infra.md → "macOS Universal".

Duration: ~15-20 min (2-arch compile).

After CI: the release stays as a draft. Stop there. The user reviews the draft and clicks "Publish" themselves. Do NOT run gh release edit --draft=false or otherwise auto-publish — publishing is the user's call, every time.

Read the full file on GitHub · 86 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

8d ago First seen · 86 lines · 47 tokens per session scan A 48caf147d342

Subscribe to this mod's changes

release is a skill published in the GitHub repository akiotanaka847/qaio-desktop (2 stars, last pushed 4d ago), licensed MIT. It adds 47 tokens to every session and 1,258 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. It is 91% identical to release, differing in 27 lines, and is treated as a copy.

Git and workflow Releases

release-announcement

Write a release announcement — changelog, blog post, in-app note, or social post — that leads with user impact, names the audience, and includes upgrade/migration steps without filler.

paperclipai/paperclip · 42 tokens

multi-agent-release-manager

Cleans up the workspace, formats code, runs presubmit checks, and uploads CLs to Gerrit.

chromium/chromium · 27 tokens

release-notes

Generate user-facing release notes from tickets, PRDs, or changelogs. Creates clear, engaging summaries organized by category (new features, improvements, fixes). Use when writing release notes, creating changelogs, announcing product updates, or summarizing what shipped.

phuryn/pm-skills · 57 tokens

pack-submit

Package one of this agent's own skills as a standalone community pack and submit it to the aeon registry as a PR.

aeonfun/aeon · 27 tokens

changelog-composer

Generates structured changelogs and release notes from git history and PRs, classifying breaking changes, features, fixes, performance, docs. Triggers on: "generate changelog", "write release notes", "what changed since", "prepare release", "release notes for", "diff since tag".

Mathews-Tom/armory · 67 tokens

updater_guide

Guidance for checking for and installing Row-Bot updates.

siddsachar/row-bot · 17 tokens