Skip to content

Bump VERSION to 0.2.0 — triggers first auto-release - #2

Merged
shiftcontrol-dan merged 2 commits into
mainfrom
dan/bump-version-0.2.0
May 14, 2026
Merged

Bump VERSION to 0.2.0 — triggers first auto-release#2
shiftcontrol-dan merged 2 commits into
mainfrom
dan/bump-version-0.2.0

Conversation

@shiftcontrol-dan

Copy link
Copy Markdown
Contributor

Summary

Bumps top-level VERSION from 0.1.0 to 0.2.0. On merge, this triggers .github/workflows/release.yaml for the first time, which will:

  1. Read VERSION (0.2.0)
  2. Confirm v0.2.0 tag doesn't exist (current latest is v0.1.0 from the manual scaffold release)
  3. Import the org-level GPG signing key
  4. Create signed tag v0.2.0, push it
  5. Build per-skill zip artifacts (one zip per skills/<name>/)
  6. Create a GitHub release v0.2.0 with auto-generated notes and the zip(s) attached

Why a MINOR bump, not PATCH

Substantive content + automation added since v0.1.0:

  • Auto-release workflow itself — net-new infra
  • Claude.ai (web + mobile) connector install section
  • 18-month default search window (was 90 days; catches annual renewals)
  • Full vs incremental invoice classification — prevents silent wrong per-unit cost
  • PDF parsing + web-hosted invoice handling
  • Real-world vendor catalog — 11 vendors documented with patterns
  • Distributors vs resellers direction handling (Bill-To detection)
  • Shared billing inbox correction (Google Groups receiver-side pattern)
  • CODEOWNERS + branch-protection-aware contribution flow
  • Marketing-voice rewrite of README + repo description
  • Audit-log terminology removed (internal vocabulary)
  • Notes replace-not-append for monthly re-runs

Pre-1.0 SemVer is flexible, but the magnitude here is more than a patch.

Type of change

Checklist

  • Commit signed (verified by GitHub)
  • No skill behavior changes in THIS PR — only the version coordinator file
  • Tag v0.2.0 doesn't already exist

Test plan

This PR is itself the test of the auto-release workflow. After merge:

  • Watch the Release on VERSION bump workflow run on the main-branch push
  • Confirm v0.2.0 appears under Tags
  • Confirm a Release appears with the skill zip attached
  • Confirm the tag is marked "Verified" (signed via the org GPG key)

If the workflow fails for any reason, the failure is contained — no damage to repo state, no partial release. The fix would land in a follow-up PR.

Notes for the merge

Use merge commit (not squash) so the workflow's path filter sees the VERSION change on main. Squash also works because GitHub creates a new commit on main with the VERSION diff, but merge commit is the cleanest semantic.

PR #1 brought substantial changes since v0.1.0 — bumping to 0.2.0 to
trigger the new auto-release workflow and produce a v0.2.0 tag + release
with the current skill content.

What landed since v0.1.0 (per PR #1):

- Multi-platform install — new Claude.ai (web + mobile) connector section
  alongside Claude Desktop, Claude Code, Cursor, Windsurf, Cline,
  Continue.dev, ChatGPT, Gemini CLI
- refresh-subscription-info default search window: 90 days → 18 months
  (catches annual renewals)
- Full vs incremental invoice classification — prevents silent wrong
  per-user-cost extraction from prorated charges
- Notes replace-not-append — single 'Updated from X invoice dated Y' line
  per app, doesn't accumulate across monthly re-runs
- PDF parsing enabled (canonical case: Salesforce-billed Slack where
  product is only in the PDF)
- Web-hosted invoices: skill asks before fetching
- Real-world vendor catalog covering Slack, Notion, GitHub, Granola,
  Framer, Anthropic, 1Password, JumpCloud, Cloudflare, Zoom, AWS
- Distributors-vs-resellers direction handling (Ingram = distributor;
  Bill-To field disambiguates consumption vs channel sale)
- Shared billing inbox correction (Google Group on the receiver side)
- Outbound-payments and other false-positive filters
- CODEOWNERS routing to @shiftcontrol-dan
- INSTALL/README marketing-voice rewrite, audit-log terminology removed
- Auto-release workflow itself (.github/workflows/release.yaml) — what
  this VERSION bump exercises for the first time

Merging this PR triggers release.yaml, which signs and pushes a v0.2.0
tag and creates a GitHub release with the per-skill zip attached.
@amazon-inspector-singapore

Copy link
Copy Markdown

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

@amazon-inspector-singapore

Copy link
Copy Markdown

✅ I finished the code review, and didn't find any security or code quality issues.

Branch protection on main requires the 'validate' status check, but the
previous path filter ('skills/**') meant the workflow skipped on PRs that
didn't touch skill files (like #2, which only bumps VERSION). A skipped
required workflow leaves the check pending forever, blocking merge.

Fix: run on every PR into main. The workflow is cheap (yq frontmatter
checks + a few greps), so the cost of always running is negligible.

The push trigger keeps its path filter — no need to re-run validate on
main pushes that didn't touch skills.
@shiftcontrol-dan
shiftcontrol-dan merged commit 560e47c into main May 14, 2026
2 checks passed
@shiftcontrol-dan
shiftcontrol-dan deleted the dan/bump-version-0.2.0 branch May 14, 2026 07:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant