A release procedure for the fmind/dotfiles project that turns approved Conventional Commits into a versioned release. It updates the version and changelog, runs checks, creates a Git tag, and pushes the release to GitHub Actions for publication.

Use it to prepare and publish a dotfiles release from a clean main branch after confirming the local branch matches the remote.

It coordinates versioning, testing, tagging, and publishing in one checked process, and stops before creating a release when required checks fail.

How fmind/dotfiles configures Claude Code and Codex

Reuse

Borrowing it

Nothing to install: this file belongs to fmind/dotfiles. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/fmind/dotfiles/main/.agents/skills/dot-release/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/fmind/dotfiles

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/fmind/dotfiles/dot-release/github.svg)](https://agentmods.dev/skills/fmind/dotfiles/dot-release)

Your own site

<a href="https://agentmods.dev/skills/fmind/dotfiles/dot-release"><img src="https://agentmods.dev/badge/skills/fmind/dotfiles/dot-release/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/fmind/dotfiles/dot-release"><img src="https://agentmods.dev/badge/skills/fmind/dotfiles/dot-release.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 27 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 416 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00027	$0.00416
Opus 5.5	$0.00011	$0.00166
Sonnet 5.5	$0.00005	$0.00083
Haiku 4.5	$0.00003	$0.00042

Measured 2mo ago against content hash 5303d143c6c6, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

dot-release scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/dot-release/SKILL.md · 38 lines

What it actually says

Dotfiles Release

Run dot release (alias dot r) to turn Conventional Commits since the last tag into a release commit and tag. The local command fetches origin, requires a clean main with HEAD == origin/main, computes the next semver via git-cliff, updates dot/version.go and CHANGELOG.md, runs the complete local gate (format, check, test), creates the commit and annotated tag, pushes main and refs/tags/v* to origin, and automatically reapplies the updated local dot binary. GitHub Actions (cd.yml) triggers on tag push to create the GitHub release.

Preconditions

Clean working tree on main; the command fetches and proves equality with origin/main before mutation.
gh authenticated, git-cliff and mise installed.
Commit history follows Conventional Commits.

Usage

# Agent / non-interactive (skips confirmation prompt)
mise run release -- -y

Gotchas

Lint or test failures during local gate abort the release before any commit or tag is created.
Pushing a release tag automatically triggers the .github/workflows/cd.yml workflow on GitHub Actions to publish the release.

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 38 lines · 27 tokens per session scan A 5303d143c6c6

Subscribe to this mod's changes

dot-release is a skill published in the GitHub repository fmind/dotfiles (4 stars, last pushed 2mo ago), licensed MIT. It adds 27 tokens to every session and 416 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Claude Code Git and workflow Releases ai-agents chezmoi dotfiles fish-shell gemini-cli

dot-cli

Run dot: doctor, login/setup, status/pull, trust, secret run, cache/prune, disk space, orphans, context budgets, archives.

fmind/dot · 35 tokens

git-delivery

Commit, push, and release with Conventional Commits; branches, worktrees, merge or rebase conflicts, hook failures.

fmind/dot · 29 tokens

repository-history

Explain why code exists: Git blame, renames, reverts, and linked PRs.

fmind/dot · 22 tokens

github-repository

Set GitHub repo description, topics, merge policy, and security settings.

fmind/dot · 19 tokens

github-pull-request

Open, update, verify, and merge GitHub pull requests.

fmind/dot · 18 tokens

sync-release

Owns release-pipeline conventions: sr.yaml schema, the sr CLI verbs (init/plan/prepare/ release) and urmzd/sr action, typed publishers (cargo/npm/pypi/docker/go/custom), monorepo workspace discovery, versionfiles/stagefiles mapping, and post-release patterns. Language-specific build targets live in scaffold-rust…

urmzd/dotfiles · 136 tokens

dotfiles: Skill for Claude Code