versioning-policy

versioning-policy is a skill for Claude Code, Codex from microsoft/Generative-AI-for-beginners-dotnet. It costs 20 tokens per session (1,506 once invoked), scanned A, a copy of versioning-policy, MIT.

Versioning rules for two Squad packages in a monorepo, which is one repository containing multiple related packages. They require standard three-part version numbers and matching SDK and CLI versions.

In plain words
What is it for?
Use them when building, reviewing, or publishing Squad SDK and CLI changes, especially when checking package versions and pull requests.
Why use it?
They prevent development-only prerelease versions and mismatched package versions from reaching shared branches or breaking dependency resolution.

Skill for Claude CodeCodex ✓ vendor

Written for no agent in particular: nothing here depends on one.

Good fit Use them when building, reviewing, or publishing Squad SDK and CLI changes, especially when checking package versions and pull requests.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/microsoft/generative-ai-for-beginners-dotnet/versioning-policy
About the project

Generative AI for Beginners .NET is a hands-on course that teaches .NET developers to build applications using generative AI models and related tools. Its lessons use practical samples covering scenarios such as chat, audio transcription, agents, and local AI. The catalogue entries are add-ons associated with the course repository.

microsoft/Generative-AI-for-beginners-dotnet · 3,052 stars · on GitHub · aka.ms

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add microsoft/Generative-AI-for-beginners-dotnet --skill versioning-policy
Clone the repo
git clone --depth 1 https://github.com/microsoft/Generative-AI-for-beginners-dotnet

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for versioning-policy

README.md
[![agentmods](https://agentmods.dev/badge/skills/microsoft/generative-ai-for-beginners-dotnet/versioning-policy.svg)](https://agentmods.dev/skills/microsoft/generative-ai-for-beginners-dotnet/versioning-policy)
Your own site
<a href="https://agentmods.dev/skills/microsoft/generative-ai-for-beginners-dotnet/versioning-policy"><img src="https://agentmods.dev/badge/skills/microsoft/generative-ai-for-beginners-dotnet/versioning-policy.svg" alt="Measured on agentmods" height="20"></a>
Per session 20 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,506 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00020 $0.01506
Opus 5 $0.00010 $0.00753
Sonnet 5 $0.00004 $0.00301
Haiku 4.5 $0.00002 $0.00151

Measured 8d ago against content hash a70698d1ba0c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

versioning-policy scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to versioning-policy — 238 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.squad/templates/skills/versioning-policy/SKILL.md · 120 lines

How it starts

The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Context

Squad is a monorepo with two publishable npm packages (@bradygaster/squad-sdk and @bradygaster/squad-cli) managed via npm workspaces. Version mismatches and prerelease leaks have caused production incidents — most notably PR #640, where a -build.N prerelease version silently broke workspace dependency resolution.

This skill codifies the versioning rules every agent must follow.

1. Version Format

All packages use strict semver: MAJOR.MINOR.PATCH

  • 0.9.1, 1.0.0, 0.10.0
  • 0.9.1-build.4, 0.9.1-preview.1, 0.8.6.1-preview

No prerelease suffixes on dev or main branches — ever.

2. Prerelease Versions Are Ephemeral

The scripts/bump-build.mjs script creates -build.N versions (e.g., 0.9.1-build.4) for local development testing only.

Rules:

  • -build.N versions are created automatically during local npm run build
  • They are never committed to dev or main
  • The script skips itself in CI (CI=true or SKIP_BUILD_BUMP=1)
  • If you see a -build.N version in a PR diff, it is a bug — reject the PR

3. SDK and CLI Version Sync

Both @bradygaster/squad-sdk and @bradygaster/squad-cli MUST have the same version at all times. The root package.json version must also match.

bump-build.mjs enforces this by updating all three package.json files in lockstep (root + packages/squad-sdk + packages/squad-cli).

If versions diverge, workspace resolution silently breaks (see §4).

4. npm Workspace Semver Footgun

The CLI depends on the SDK via a workspace dependency with a semver range:

"@bradygaster/squad-sdk": ">=0.9.0"

Critical: Per the semver specification, >=0.9.0 does NOT match 0.9.1-build.4.

Semver prerelease versions (anything with a - suffix) are only matched by ranges that explicitly reference the same MAJOR.MINOR.PATCH base with a prerelease comparator. A bare >=0.9.0 range skips all prerelease versions.

What happens: When the local SDK has version 0.9.1-build.4, npm's workspace resolution fails to match the >=0.9.0 range. npm then silently installs a stale published version from the npm registry instead of using the local workspace link. The build succeeds but runs against old SDK code.

Read the full file on GitHub · 120 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 120 lines · 20 tokens per session scan A a70698d1ba0c

Subscribe to this mod's changes

versioning-policy is a skill published in the GitHub repository microsoft/Generative-AI-for-beginners-dotnet (3,052 stars, last pushed 7d ago), licensed MIT. It adds 20 tokens to every session and 1,506 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to versioning-policy, differing in 238 lines, and is treated as a copy.