#Changelog

#0.60.1

Feature matrix n/a support for toolchain-native checks

#Features

• Feature matrix. Support "n/a" cells for checks where the toolchain already handles the concern natively (e.g., circular-deps for Go modules).

#0.60.0

#Features

• Go workspace dependency validation. GoImportScanner enables deps-unused, deps-undeclared, deps-runtime-test-only, and deps-dev-in-lib checks for Go projects.
• Circular dependency detection. New circular-deps quality check detects intra-package circular import chains using Tarjan's SCC algorithm. Per-language severity: Python=warn, npm=error. Go is skipped (compiler catches cycles).
• Dart dead-module detection. The dead-modules check now supports Dart projects, finding unreachable files via entry-point reachability from pubspec.yaml barrel files and bin/ scripts.
• Feature matrix directive. New table-feature-matrix selfdoc directive auto-generates a language support table in docs.

#0.59.1

#Fixes

• Fix. Root-project dep scan no longer produces false-positive deps-undeclared findings from sibling project source files.

#0.59.0

#Features

• PlainTarget auto-detection. VERSION-only projects are now auto-detected without opt-in configuration.
• Unified manifest detection. Target detection files are now derived from the target registry as a single source of truth, eliminating hardcoded manifest lists.
• Required template variables. process_template now errors on missing critical variables at scaffold time instead of silently leaving placeholders.
• Monorepo sync template resolution. monorepo sync now resolves template variables in per-project CI workflows instead of copying them verbatim.

#Fixes

• Scaffold auto-commit and hook install from sub-directories. Scaffold auto-commit and pre-push hook installation now work correctly when run from monorepo sub-project directories.
• Release file commits auto-exempted. Commits that only touch .rlsbl/releases/ files are now automatically exempted from changelog coverage checks.

#0.58.0

#Features

• New check. dead-workspace-packages detects workspace library packages never imported by any sibling, with specific messaging for test-only imports.

#Fixes

• Improved. Expanded monorepo release init command description for better selfdoc SEO.

#0.57.1

#Fixes

• Fix. monorepo release-init no longer crashes on Python 3.14 when rendering commented-out package sections. The tomlkit.dumps() call was replaced with tomlkit.item().as_string() to avoid a ValueError when serializing arrays.

#0.57.0

#Features

• New. monorepo release-init now accepts a --packages flag to scaffold only specific packages. Packages with zero unreleased commits are automatically commented out with an explanation.
• New. Feature support matrix: get_feature_matrix() and generate_feature_matrix_markdown() functions showing which checks support which targets.

#Fixes

• Fix. retry.toml is now cleaned up when validation fails during release retry, in both the init and retry handlers. Previously, an invalid retry.toml could be left behind, blocking subsequent retries.

#0.56.0

#Breaking

• LICENSE removed from scaffold. Projects must now manage their own LICENSE file. The license-file check enforces its presence.

#Features

• npm dead module detection. New dead-modules-npm check detects unreachable modules in npm packages by tracing entry-point reachability through the dependency graph.
• New checks. license-file errors if LICENSE is missing, empty, or contains template variables. scaffold-unreplaced-vars detects leftover template variables in scaffold-generated files.
• Batch release-init improvements. Flutter targets now get per-target config sections. Release files include TOML comments and the context field.

#Fixes

• Fix retry.toml blocking release. release retry now cleans up the scaffolded retry.toml when validation fails, preventing it from blocking subsequent release run attempts.
• Fix bare scaffold for plain targets. rlsbl scaffold now reads targets from config.json for already-scaffolded projects that use plain targets, instead of erroring.
• Fix workspace-unregistered false positives. The check now skips private package.json files and parent directories of registered projects.
• Shared release config validation. Single and batch release paths now use a shared validator, fixing missing Flutter validation in the batch path.

#0.55.0

#Features

• New command. monorepo release-init scaffolds a batch release file with per-package sections for all workspace projects.
• New feature. dead-modules check now supports Go projects. Detects unreferenced internal/ packages via tree-sitter import scanning.

#Fixes

• Fix. Template sheltering now handles dotted placeholders like {{zig.projectName}}, preventing YAML corruption in multi-target scaffold.
• Fix. Scaffold with explicit --target now uses the current directory as project root, fixing dev_node detection for plain-target projects in monorepos.
• Fix. Workspace stale-entries and unregistered checks now recognize all 16 target manifest types plus .rlsbl/config.json as a universal project indicator.

#0.54.2

#Fixes

• Fix. Batch release files now enforce mandatory description per package, matching single-release behavior.
• Fix. Dep quality checks now share a cached import scan instead of scanning 4x per workspace project.

#0.54.1

#Breaking

• Breaking. Release description is now mandatory in unreleased.toml. Every release must have a short summary.

#0.54.0

#Breaking

• Breaking. Renamed changelog_exempt to dev_node. Dev node projects no longer participate in the changelog system — no JSONL entries, no CHANGELOG.md, no pre-push enforcement. Release does version bump + tag + GitHub Release (body from release description). Boundary guardrail prevents non-dev-nodes from depending on dev_nodes at runtime.

#Features

• Internal. Added WorkspaceProject typed wrapper and project field on ProjectContext for structured workspace project access.
• New feature. Release description and context fields in unreleased.toml. Description appears in CHANGELOG.md under version heading. Context appears as collapsible details block. Description mandatory for dev_node releases.
• New feature. Three quality checks: deps-runtime-test-only (warning: runtime dep only used in tests), deps-dev-in-lib (error: dev dep imported in lib code), dead-modules (warning: Python modules with zero intra-project references).

#Fixes

• Fix. Library lint now excludes test and example files by default. Go *_test.go, Python test_*.py/tests/, npm *.test.ts/__tests__/, and examples/ dirs are no longer flagged for stdout usage.

#0.53.0

#Breaking

• Breaking. Renamed internal workspace flag to changelog_exempt. The new name describes the behavior (changelog enforcement exemption), preventing misuse.

#Features

• Internal. Added scope field to Dependency namedtuple (runtime/dev/peer/explicit). Reverse dependency graph now supports scope-filtered traversal.

#0.52.0

#Breaking

• Breaking. All target methods (template_mappings, read_name, write_version) now require ctx parameter (no default). Fixed _is_library CWD bug in template_mappings.

#Features

• New feature. internal = true workspace flag. Internal projects are fully exempt from changelog enforcement: no JSONL entries needed, pre-push check skips them, no user-facing requirement. Version bumps and GitHub Releases still work.
• New feature. deps-unused check now scans JS/TS imports via tree-sitter. npm workspace dependencies (workspace:*) are no longer false-positived as unused.

#Fixes

• Fix. Go target no longer misdetects cmd-layout projects (cmd/*/main.go) as libraries. Scaffold now correctly includes publish.yml and .goreleaser.yml for these projects.
• Fix. Standalone multi-target publish workflows now inject working-directory, packages-dir, and version-file paths for targets in subdirectories. Refactored to structured YAML.

#0.51.0

#Breaking

• Breaking. Renamed monorepo_root to workspace_root on ProjectContext. Deleted ProjectCheckContext — all check functions now receive ProjectContext with pre-loaded config.
• Breaking. All target methods (template_vars, shared_template_mappings, read_name, write_version, publish) now accept ctx: ProjectContext instead of project_root. Fixed latent bugs where dart write_version and docker read_name didn't receive config.

#Features

• Internal. Added [tool.uv.sources] for editable strictcli install.

#0.50.0

#Breaking

• Breaking. Config utility functions (should_tag, get_push_timeout, push_if_needed, read_deploy_config, get_publish_config) now accept a config dict instead of project_root. write_project_config returns the updated dict.
• Breaking. All target publish() methods now accept ctx: ProjectContext instead of project_root. Config is read from ctx.config — no redundant disk reads during publish.

#Features

• Internal. Extracted shared _rel_to_git_root utility, eliminating duplicate path normalization in release flow.
• Internal. Added regression test for release abort cleanup (unexpected-files scenario).

#0.49.2

#Features

• Internal. Commands that don't read config no longer load it at startup. Scaffold commands use ProjectContext for direct config access.
• Internal. Added release integration tests exercising the full release flow against real git repos (no mocked subprocess calls).

#Fixes

• Fix. Increased npm check-name timeout from 10s to 30s to reduce CI flakiness on cold-cache runners.
• Fix. Changelog finalization now uses git-relative paths consistently, matching the version-bump commit's path format.
• Fix. Monorepo release lock file now uses the correct root path.

#0.49.1

#Fixes

• Fix. Monorepo release commits now use correct relative paths for version-bumped files.

#0.49.0

#Breaking

• Breaking. Release, pre-push check, deploy, and undo commands now receive ProjectContext instead of bare project_root. Config is read once at startup via ctx.config instead of re-reading from disk at each call site.

#Fixes

• Fix. Configuration docs no longer trigger stale-description warnings on every release. The version field is excluded from the selfdoc.json schema table.
• Fix. Adapted check system bootstrap for strictcli v0.11 API (required app field in checks.toml).

#0.48.2

#Fixes

• Fix. Lockfile modifications from version bump no longer falsely flagged as concurrent changes during release.

#0.48.1

#Fixes

• Fix. rlsbl scaffold no longer crashes for Go, Zig, and Docker projects (missing project_root argument in template_vars/shared_template_mappings).

#0.48.0

#Breaking

• Breaking. All internal APIs now require explicit project_root parameter (no silent CWD fallback). Eliminates the last footgun from the os.chdir removal.

#Fixes

• Fix. Release aborts (e.g., unexpected dirty files) now revert version-bumped files instead of leaving the working tree dirty. Prevents selfdoc hash oscillation on subsequent releases.
• Fix. Corrupt .rlsbl/config.json now raises a clear error with the file path instead of silently returning empty config.
• Fix. Release lock file is now created relative to the project root, not CWD.

#0.47.0

#Breaking

• Breaking. release init scaffolds bump = "" (was "patch") and release retry scaffolds ref = "" (was the tag). Both fields must now be set explicitly. Scaffolded files include explanatory TOML comments.

#Features

• New flag. watch --run-id monitors CI runs by ID instead of commit SHA. Accepts multiple values (--run-id 123 --run-id 456). Mutually exclusive with the SHA positional arg.
• Retry + watch integration. release retry now captures dispatched workflow run IDs and passes them to watch --run-id, so monitoring works correctly even when the dispatch ref differs from the release tag.
• CI sync rewrite. Monorepo CI sync transforms rewritten from text-based to structured YAML (ruamel.yaml round-trip mode). working-directory is now injected per-job (not workflow-level), correctly handling cross-project CI workflows.
• Monorepo scoping. status and unreleased now filter commits by project directory in monorepo mode, showing only commits that touch the current project's files.

#Fixes

• Fix. changelog add in monorepo sub-projects no longer writes to the root JSONL file. Path resolution uses explicit project root instead of CWD.
• Fix. Config reads (push_timeout, publish config, deploy config, etc.) no longer fail silently after CWD shifts during monorepo releases. All config functions accept explicit project_root.
• Fix. Release no longer falsely aborts with 'unexpected modified files' when project_root is an absolute path.

#0.46.0

#Breaking

• Breaking. --update flag removed from scaffold. Bare rlsbl scaffold is now idempotent — creates what's missing, three-way merges what exists. Run it anytime.

#0.45.1

#Fixes

• Bug fix. Scaffold now creates non-workflow files (like .npmignore) from all targets, not just the primary.
• Bug fix. Docker publish template no longer has {{version}} replaced by the literal version. Added escape syntax (\{{...}}) to the template engine.
• Bug fix. Scaffold now uses the correct subdirectory path for npm targets instead of always looking at the repo root.
• Docs. release retry help text updated to describe dispatch-only behavior.

#0.45.0

#Breaking

• Breaking. push_timeout must now be explicitly set in .rlsbl/config.json or via RLSBL_PUSH_TIMEOUT env var. The implicit 120-second default is removed.

#Features

• Improvement. The plain release target now bumps pyproject.toml version when present, keeping it in sync with VERSION.

#Fixes

• Bug fix. release run now correctly applies directory scoping for monorepo changelog validation, matching rlsbl check --tag changelog behavior.
• Bug fix. Changelog checks now use the target-specific tag pattern in monorepos (e.g., go/v* for Go targets instead of go@v*).

#0.44.0

#Breaking

• Breaking. release retry is now dispatch-only. It no longer deletes/re-creates the GitHub Release or re-uploads assets. It dispatches workflows from retry.toml via gh workflow run. Schema simplified to 3 fields: version, dispatch, ref.

#0.43.1

#Features

• Scaffold. npm targets now get a .npmignore file with sensible defaults, preventing non-npm content from being published.

#Fixes

• Bug fix. release retry now always dispatches all workflows listed in retry.toml, not just as a fallback when no runs are found. Fixes CI never being re-triggered when Publish triggers naturally.

#0.43.0

#Breaking

• Breaking. edit-release, undo, and yank are now subcommands of the release group: release edit, release undo, release yank.
• Breaking. release retry is now file-driven via retry.toml. Auto-scaffolds the file with defaults when not present. The version positional argument is removed.

#Features

• Improvement. release yank now shows a confirmation prompt before destructive operations, with --yes to bypass.
• Improvement. release run now detects monorepo root and errors with guidance to use monorepo release.

#Fixes

• Bug fix. Multi-target scaffold now correctly includes workflow_dispatch in merged publish workflows.
• Bug fix. selfdoc.json version is now auto-bumped during release even when docs is not in the configured targets. The version-consistency check also detects drift independently of target config.
• Bug fix. Monorepo changelog coverage now only requires entries for commits touching the package's own files, not all commits in the range.
• Bug fix. release yank now uses correct monorepo tag format instead of hardcoding v{version}.

#0.42.0

#Breaking

• Breaking. rlsbl release is now a command group. Use rlsbl release run (was rlsbl release), rlsbl release init (was rlsbl release-init), and the new rlsbl release retry.
• Breaking. rlsbl release run requires --watch or --no-watch. --watch auto-monitors CI to completion; --no-watch prints the watch hint.

#Features

• New command. rlsbl release retry re-creates a GitHub Release to re-trigger CI/CD workflows, with asset re-upload and automatic gh workflow run fallback.
• Scaffold. All generated CI and Publish workflow templates now include workflow_dispatch trigger for manual re-triggering after GitHub Actions outages.
• Watch. rlsbl watch now suggests rlsbl release retry when no CI runs are found but a GitHub Release exists for the commit.
• New target. pgdesign release target for database schema projects.

#Fixes

• Bug fix. rlsbl check commands no longer crash in monorepo context with WorkspaceGraph.__init__() missing required argument.

#0.41.7

#Features

• New feature. Releases are now blocked when there are no user-facing changelog entries. Shown as a warning during rlsbl check, hard error during rlsbl release.
• New feature. changelog add and changelog amend now detect duplicate commits -- hard error when the same commit appears in an entry with matching type, warning when types differ.

#Fixes

• Fix. DocsTarget version sync now also updates the last entry in selfdoc.json versions array, preventing VER003 lint failures after release.

#0.41.6

#Features

• New feature. Run selfdoc gen --no-commit before selfdoc check during release, ensuring docs are regenerated from source before validation.

#Fixes

• Fix. selfdoc check failures now print a clean error message instead of a raw Python traceback.

#0.41.5

#Fixes

• Fix. Detect npm moniker collisions for separator-free names. Previously, check-name pgspec --target npm reported "available" even though pg-spec exists and npm considers them identical. Now generates insertion variants (inserting -, ., _ at every position) and checks each. Also fixed dot separator handling -- dots are now treated identically to dashes and underscores, matching npm's actual normalization.

#0.41.4

#Fixes

• Fix: selfdoc hashes no longer left dirty after release. Content hashes are refreshed after the version bump so the working tree stays clean post-release.

#0.41.3

#Features

• DocsTarget is now a versioned target. Reads and writes version from selfdoc.json. The version-consistency check now includes docs targets instead of skipping them.

#0.41.2

#Features

• Go assets use goreleaser for cross-compilation. When goreleaser is installed, build_assets() produces binaries for linux/darwin/windows x amd64/arm64. Falls back to host-only go build when goreleaser is unavailable.

#0.41.1

#Breaking

• **Breaking: .claude/settings.json removed from scaffold templates.** Claude Code does not require this file. Projects with customized hooks keep their existing file.

#Features

• Config validation and migration. Release flow now validates publish.<target>.assets config. scaffold --update auto-detects missing private key. New config-schema check (29 checks total). Removed get_max_asset_size_mb() implicit default.

#Fixes

• **Fix: library-lint check skips non-library projects.** Standalone projects no longer produce 523 spurious lint errors in rlsbl check --all.

#0.41.0

#Breaking

• **Breaking: private config key is now required.** No implicit default. Set "private": true for private repos or "private": false for public repos. Private repos are blocked from publishing to public registries.
• Breaking: private hook template removed. The post-release-private.sh.tpl scaffold template is deleted. Asset upload is now a built-in release step configured via publish.<target>.assets. A new private-hook-stale check detects legacy private hooks.
• Breaking: CLAUDE.md removed from scaffold templates. Projects using selfdoc root file templates should manage CLAUDE.md via docs/_CLAUDE.md. Scaffold no longer creates or updates CLAUDE.md.
• **Breaking: run_cmd legacy signature removed.** The release command no longer accepts run_cmd(registry, args, flags). Use ReleaseConfig from rlsbl.release_file instead.

#Features

• **New command: changelog amend.** Amend historical changelog entries in released JSONL files. Unlocks the file, appends the entry, re-locks, regenerates CHANGELOG.md, and syncs GitHub Release notes via edit-release.
• **Per-target build_assets().** New target method for building distributable artifacts. Implemented for PyPI (uv build), npm (npm pack), Go (go build), and Cargo (cargo build --release).
• Release asset upload. Configure publish.<target>.assets: true and max_asset_size_mb to build and upload artifacts to GitHub Releases during rlsbl release. Size guard aborts if artifacts exceed the limit.
• Auto-dump strictcli schema during release. Projects with strictcli in their dependencies automatically run --dump-schema during release. Changed .strictcli/schema.json is included in the release commit.
• Selfdoc check runs earlier in release pipeline. Moved from after lint to after pre-checks hook, catching staleness errors before tests run.

#Fixes

• Fix: noop commit warnings eliminated. Monorepo sync, monorepo snapshot, and validation cache no longer warn when nothing changed. Prints a clear skip message instead.
• **Fix: release-init no longer refuses empty files.** An empty or whitespace-only unreleased.toml left after finalization no longer blocks release-init.
• Fix: version-consistency check no longer fails on DocsTarget. Targets with no version file (like docs) are skipped in the version comparison.

#0.40.1

#Fixes

• Fix. CI workflow updated for the check to check-name rename.

#0.40.0

#Breaking

• **Breaking: removed --skip-tests, --skip-lint, --skip-docs, --skip-remote-check, and --no-tag flags from the release command.** Tests, lint, and remote checks now always run. Selfdoc check is automatically skipped when docs target is excluded in the release file. Only --allow-dirty remains as a release-specific flag.

#Features

• selfdoc root file templates. README.md and CLAUDE.md are now auto-generated by selfdoc from docs/_README.md and docs/_CLAUDE.md templates. Edit the templates, not the generated files.

#0.39.0

#Breaking

• Breaking: file-based releases. rlsbl release now reads from .rlsbl/releases/unreleased.toml instead of CLI args. Run rlsbl release-init to scaffold the file. The file declares bump type, included/excluded targets, and per-target config.
• **Breaking: rlsbl doctor, monorepo lint, and changelog validate removed.** Replaced by the unified rlsbl check command. Use rlsbl check --all, rlsbl check --tag workspace, or rlsbl check --tag changelog.
• **Breaking: --dry-run, --yes, --quiet are now global flags.** They apply to all commands. Both rlsbl --dry-run release and rlsbl release --dry-run work.
• Breaking: PyYAML replaced with ruamel.yaml. Projects extending rlsbl's YAML handling must use the ruamel.yaml API.
• Breaking: rlsbl check (name availability) renamed to rlsbl check-name to make room for the unified check system.

#Features

• Unified check system. 27 checks migrated to strictcli's @app.check() framework. Run rlsbl check --all, filter by tag (--tag project, --tag changelog, --tag workspace, --tag release), or by name (--name lock). Supports dependency ordering, JSON output, dry-run, and verbose modes.
• Dart target and workspace scanner. New dart target type: reads/writes pubspec.yaml version field with round-trip formatting preservation. DartScanner detects intra-workspace dependencies in Dart monorepos.
• Flutter iOS/Android targets with Shorebird OTA. Separate flutter-ios and flutter-android targets with platform-specific tags. Release file mode field (ota/build) controls release type. Native file detection blocks OTA when platform code changes. Build number (+N) management opt-in via config.
• **monorepo graph command.** Export the workspace dependency graph as JSON, DOT (Graphviz), or indented text. Filter with --root (transitive deps), --reverse (transitive rdeps), and --depth.
• **monorepo snapshot command.** Generates .rlsbl-monorepo/snapshot.json summarizing all packages, versions, deps, and graph structure. --check mode for CI staleness detection. Auto-regenerates during monorepo releases.
• Architectural layer rules. Define [layers] in workspace.toml with ordered layers and glob-based package assignments. The layers-violations check enforces dependency direction. Supports unrestricted packages, forbidden targets, and explicit cross-layer allowances.
• Dependency-import validation. New deps-unused and deps-undeclared checks scan source files (Python via tree-sitter, Dart via regex) to verify declared dependencies match actual imports. Whitelist via .rlsbl-monorepo/dep-overrides.toml.
• **monorepo impact command.** Analyze blast radius of changes: input a package name, file paths, or git range (--since). Outputs direct/transitive dependents, test scope, and release candidates in JSON or text.
• Coordinated multi-package releases. monorepo release reads a batch release file (.rlsbl-monorepo/releases/unreleased.toml) and releases packages in topological order. New deps-stale check detects outdated intra-workspace constraints. Advisory constraint propagation after each release.

#0.38.2

#Fixes

• Fix. Publish router no longer fails for plain-target releases. Added a no-op job so GitHub Actions workflows succeed even when all conditional publish jobs are skipped.

#0.38.1

#Features

• Hook-generated files included in release commit. Files modified or created by pre-checks and pre-release hooks are now automatically detected and included in the release commit, instead of being left dirty.

#Fixes

• Fix PyPI build for subdirectory targets. uv build --out-dir no longer produces a doubled path (e.g. pypi/pypi/dist) when the pypi target lives in a subdirectory.

#0.38.0

#Breaking

• Monorepo publish router inlines jobs. monorepo sync now inlines each sub-project's publish steps directly into the root publish.yml instead of calling per-project reusable workflows via workflow_call. This fixes PyPI Trusted Publishing (OIDC), which rejects tokens from reusable workflows. Per-project source workflows stay on: release (standalone-ready). Old {name}-publish.yml wrappers are auto-deleted on sync.

#Features

• Publish router hash cache. monorepo sync now caches SHA256 hashes of per-project publish workflows in .rlsbl-monorepo/publish-cache.json and skips router regeneration when nothing changed.

#Fixes

• **Fix Zig npm-wrapper needs: dependency.** build_npm_publish_jobs() no longer hardcodes needs: [goreleaser] -- Zig projects now correctly use needs: [build-and-upload].
• **Fix monorepo sync self-reference with path=".".** Projects with path="." no longer wrap the generated router as their own publish workflow.

#0.37.0

#Features

• New feature. Auto-sync lockfiles during release. After version bump, rlsbl detects uv.lock, package-lock.json, and go.sum, runs the appropriate sync command, and includes modified lockfiles in the release commit.

#Fixes

• Fix. Restore path-based changelog-only commit exemption alongside the Autogenerated trailer check. Manual commits touching only .rlsbl/changes/ or CHANGELOG.md are now correctly skipped during coverage validation.
• Fix. Skip gitignored lockfiles during release lockfile sync. Previously, syncing a lockfile that was in .gitignore caused git add to fail and aborted the release.

#0.36.1

#Fixes

• Fix. Monorepo target detection now resolves project paths relative to the monorepo root, not the current directory. Fixes changelog validation and status reporting when running from inside a sub-project.
• Fix. uv build and uv publish now run from the sub-project directory in monorepo mode, fixing build failures for PyPI targets.

#0.36.0

#Features

• New feature. Asset size guard in private post-release hook -- checks files in dist/ against max_asset_size_mb (default 2MB) before uploading to GitHub Releases.

#0.35.1

#Features

• Cleanup. Changelog commit exemption now uses only the Autogenerated: true trailer; old path-pattern fallback removed.

#Fixes

• Bug fix. Release finalization now generates the per-version .md file alongside the JSONL.
• Bug fix. Release flow no longer false-positives on files written by hooks, lint, or changelog generation.

#0.35.0

#Features

• **rlsbl release warns about stale changelog entries in monorepo mode.** During finalization, entries referencing commits outside the unreleased range are flagged to stderr (warn-only; no entries stripped) so out-of-range entries don't silently carry into the next release cycle.
• **Template action versions now use {{action "name"}} placeholders.** GitHub Action versions in scaffold templates are resolved at scaffold time from rlsbl/data/action_versions.toml, eliminating duplication between the table and 60+ template references. Updates to action versions now require editing only the table.

#Fixes

• Release flow no longer crashes when extracting the changelog entry. Fixed a regression introduced in v0.34.0 where the in-memory preview of generate_changelog used ## Unreleased as the heading but entry extraction looked for ## X.Y.Z, returning None and crashing later in GitHub Release notes generation. The preview call now passes version_override=new_version so the heading matches.
• **max_entries_per_commit default raised from 2 to 5.** The previous default 2 was too strict and contradicted the documented practice that one commit can appear in multiple JSONL entries (e.g., fix + feature). Default now matches the existing max_commits_per_entry default of 5.

#0.34.0

#Features

• Configurable changelog batch-limits validation. rlsbl changelog validate now checks that no entry has more than max_commits_per_entry (default 5) commits and that no commit appears in more than max_entries_per_commit (default 2) entries. Both limits configurable per project via the batch_limits section in .rlsbl/config.json. Known violations can be silenced via an exclusions list with a required reason field for audit purposes.

#0.33.0

#Features

• **rlsbl dev install expanded.** New --global (default) and --venv flags. Added support for hex, deno, zig, and swift targets in addition to pypi/npm/go/cargo. For pypi/npm, --venv installs into the project's local environment (uv sync / npm install).

#Fixes

• PyPI publish error names both env vars. When the PyPI publish credential is missing and no token_var override is configured, the error message now reads 'no PYPI_TOKEN or TWINE_PASSWORD' instead of hardcoding only PYPI_TOKEN.
• Em-dash in status warning. rlsbl status's 'commits ahead' warning now uses an em-dash separator (— run) instead of two hyphens (-- run).
• **Empty release_branches config is now an error.** Previously an explicit empty list silently fell back to ['main','master'] and disabled the manual-push warning. To opt out of the warning, remove the release_branches key entirely; to limit to specific branches, list them.
• **rlsbl release no longer pollutes the working tree on abort.** Previously, when a pre-mutation check (selfdoc, tests, lint, hooks) failed, the regenerated CHANGELOG.md was left in the working tree and had to be manually reverted. The write is now deferred until after all pre-checks pass.

#0.32.0

#Features

• Status warning for unreleased commits. rlsbl status now prints a prominent ! N commits ahead of <tag> warning when the current project has unreleased commits since its last tag.
• Centralized GitHub Actions versions. All scaffolded workflows now read action versions from a single table (rlsbl/data/action_versions.toml), and actions/checkout has been bumped to v6 across every template ahead of the June 2026 Node 20 deprecation.
• **scaffold --dry-run.** Preview which files would be created, updated, conflicted, or unchanged without writing anything.
• **scaffold --update regenerates stale pre-push hooks.** Known-old hook contents are recognized by content hash and overwritten with the current template; user-customized hooks are preserved and a unified diff is printed for manual review.
• Pre-push hook warns on manual release-branch pushes. Pushing to main/master outside rlsbl release now prints a prominent warning (configurable via release_branches in .rlsbl/config.json). The push is not blocked.
• Config-driven per-target publish gating. A new publish section in .rlsbl/config.json declares local: true|false and token_var overrides per target, replacing ad-hoc env-var-presence checks across all 7 publishable targets.
• **New rlsbl dev install command.** Locally installs the current project in editable mode based on its target (pypi → uv tool install -e ., npm → npm link, go → go install ./..., cargo → cargo install --path .). Supports --uninstall, and in monorepos: --all, --include, --exclude.
• **User-owned ci-custom.yml and publish-custom.yml.** Customize CI without three-way merge conflicts by adding your own jobs in a separate workflow file that rlsbl scaffold never touches.
• **--no-commit flag on rlsbl monorepo init/add/sync.** Consistent with scaffold and changelog; enables batched migrations into a single commit.

#Fixes

• Go monorepo tag bug fix. Release in a Go monorepo no longer produces malformed tags like auth-gatewayv0.1.0 when the workspace.toml path lacks a trailing slash — the separator is now inserted defensively, and workspace paths are normalized at load time.
• Monorepo publish workflows now run on release. The generated publish router declares per-target permissions: and secrets: inherit, fixing the startup_failure that affected every monorepo publish run on GitHub Actions.
• **scaffold --update no longer commits files with merge conflict markers.** Conflicted files are excluded from the auto-commit and listed so they can be resolved manually.
• Docs target no longer fails when Cloudflare credentials are missing. DocsTarget.publish() gracefully skips selfdoc deploy when CF_ACCOUNT_ID or CF_PAGES_API_TOKEN is absent, instead of producing a hard subprocess error on every release.
• **Autogenerated: trailer uses git's --trailer flag.** rlsbl-created commits now record the trailer via git commit --trailer instead of embedding it in the commit message body. This makes the trailer correctly parseable by git interpret-trailers and other git tooling, which previously couldn't read the embedded form.

#0.31.0

#Breaking

• Breaking. Go targets in monorepos now use path-based tags (go/v0.1.1) instead of name-based ([email protected]), matching Go module proxy requirements. All tag discovery and matching updated.

#Features

• Feature. Go CLI projects automatically run go install after release to update the local binary.
• Feature. selfdoc check runs automatically during release when selfdoc.json exists. Skip with --skip-docs.

#Fixes

• Fix. Commits touching only changelog infrastructure files (.rlsbl/changes/, CHANGELOG.md) are again exempt from coverage, even without the Autogenerated trailer.
• Fix. Release flow now rolls back locally on push failure: deletes the tag, resets commits, and prints recovery instructions. Branch and tag are pushed in a single git push command.
• Fix. rlsbl undo now handles the two-commit release pattern (version bump + changelog finalize), reverting both and restoring JSONL state.

#0.30.1

#Features

• Feature. All commit_files() calls now default to autogenerated=True, ensuring every rlsbl-generated commit carries the Autogenerated: true trailer.
• Feature. Pre-push hook now blocks pushes when unreleased.jsonl, .validated, or CHANGELOG.md are gitignored.

#Fixes

• Fix. .validated cache is no longer gitignored; tracked per project rules.
• Fix. Pre-push hook now reads all JSONL files (unreleased + versioned) for coverage, fixing release pushes being blocked after changelog finalization.

#0.30.0

#Breaking

• Breaking. Changelog coverage exemption now uses the Autogenerated: true git trailer instead of file-path pattern matching and commit-message regexes. Auto-generated commits must carry this trailer to be exempt.

#Features

• New command. rlsbl commit commits files with an Autogenerated: true git trailer, marking them as auto-generated for changelog coverage exemption.
• Feature. Changelog finalization, rlsbl changelog add, and rlsbl changelog generate auto-commits now carry the Autogenerated: true trailer.
• Feature. Pre-push hook skips JSONL coverage check when pushing a version tag (standalone v* or monorepo name@v*).

#0.29.1

#Fixes

• Fix. Release no longer aborts when the .validated changelog cache is updated during validation.

#0.29.0

#Features

• New command. rlsbl monorepo lint detects unregistered projects and stale workspace entries.

#Fixes

• Fix. Pre-push hook now recognizes monorepo release commit messages and filters coverage checks to only commits affecting each sub-project.
• Fix. Release commit now includes all version files modified by targets (__init__.py for PyPI, build.zig.zon for Zig, dynamically-chosen file for Maven).
• Fix. Built-in tests, lint, and hook scripts now run from the correct sub-project directory in monorepo mode.
• Fix. Changelog validation, rlsbl status, and rlsbl changelog validate now use project-scoped tags (<name>@v*) in monorepo mode.
• Fix. rlsbl undo now correctly finds project-scoped tags and matches monorepo release commit messages.

#0.28.1

#Fixes

• Fix: status applies changelog-only exemptions. rlsbl status now excludes changelog-only commits from the JSONL coverage count, consistent with changelog validate. Shows exemption count when applicable.
• Fix: gitignore uses set-union merge on scaffold update. scaffold --update now appends new entries to .gitignore without three-way merge, eliminating predictable conflicts. No lines are removed or reordered.
• Fix: backfill script uses CWD as default project root. scripts/backfill_changelog.py now operates on the current directory instead of hardcoding rlsbl's own root. Accepts --project-root for explicit override.

#0.28.0

#Breaking

• Revert: strict type validation removed. Changelog entry types are freeform strings again. Non-standard types render under "Other" in generated CHANGELOG.md. Formalization deferred until real-world usage patterns emerge.

#Features

• **changelog generate auto-commits.** Generated CHANGELOG.md and per-version .md files are now auto-committed after generation. Use --no-commit to skip.

#Fixes

• **Fix: monorepo publish workflow renamed to publish.yml.** The monorepo publish router was named publish-router.yml, which broke PyPI Trusted Publishing OIDC claims when projects moved between standalone and monorepo layouts. Now always publish.yml in both contexts.
• Fix: monorepo sync handles trailing slashes, version-file paths, and packages-dir. Sync no longer produces double-slash globs from workspace.toml paths with trailing slashes. Action inputs like go-version-file are rewritten to include the sub-project path. pypa/gh-action-pypi-publish gets packages-dir injected when working-directory is set.
• **Fix: monorepo publish workflow renamed to publish.yml.** The monorepo publish router was named publish-router.yml, which broke PyPI Trusted Publishing OIDC claims. Now always publish.yml in both standalone and monorepo contexts.
• Fix: monorepo sync handles trailing slashes, version-file paths, and packages-dir. Sync no longer produces double-slash globs. Action inputs like go-version-file are rewritten for sub-project paths. pypa/gh-action-pypi-publish gets packages-dir injected.

#0.27.0

#Breaking

• Breaking: JSONL changelog required. rlsbl release now requires .rlsbl/changes/ to exist. The manual CHANGELOG.md heading check fallback has been removed. Run rlsbl scaffold --update to set up JSONL changelogs.
• Breaking: old lint.toml ignore format removed. The deprecated flat ignore key in .rlsbl/lint.toml is no longer supported. Use per-language config in .rlsbl/lint/python.toml etc.
• **Breaking: get_* method aliases removed from BaseTarget.** Target implementations now use bare method names (version_file, template_dir, etc.) matching the ReleaseTarget protocol.
• Breaking: lint returns empty results when no language detected. Previously defaulted to Python scanning; now requires a language marker file (pyproject.toml, go.mod, package.json).

#0.26.1

#Fixes

• Fix: Watch CI hint points to the correct commit. The release command now captures the pushed SHA before running post-release hooks, so rlsbl watch targets the release commit instead of a post-hook auto-commit.

#0.26.0

#Features

• **rlsbl yank command.** Deprecate or delete past releases. Soft yank (rlsbl yank v1.2.3) marks the GitHub Release as a pre-release with a deprecation notice. Hard yank (rlsbl yank v1.2.3 --hard) deletes the GitHub Release and its git tag entirely.
• **PyPI release bumps __version__.** Python source files containing __version__ are now updated alongside pyproject.toml during release, keeping runtime version introspection in sync.
• Strict type validation for JSONL entries. Changelog entries with user_facing: true now require type to be one of feature, fix, or breaking. Unrecognized types are rejected during validation and changelog add.

#Fixes

• Fix: scaffold stays in sub-project directory. In monorepos, rlsbl scaffold no longer walks up to the repo root when project files already exist in the current directory. Previously this caused scaffold to operate on the wrong project.

#0.25.4

• No user-facing changes.

#0.25.3

#Fixes

• Fix: tag-based range for changelog validation. Unreleased commit detection now uses <last_tag>..HEAD instead of origin/main..HEAD. This correctly answers "what hasn't been released" rather than "what hasn't been pushed," and works regardless of branch naming convention or remote configuration.

#0.25.2

• No user-facing changes.

#0.25.1

#Fixes

• Fix: built-in lint only runs on library projects. The pre-release lint check no longer runs on CLI applications, avoiding false positives for print() calls and entry points. Lint runs only for monorepo projects with library = true.
• Fix: CHANGELOG.md regenerated after JSONL finalization. The release command now regenerates CHANGELOG.md after renaming unreleased.jsonl to the versioned file, so the changelog heading shows the version number instead of "Unreleased".

#0.25.0

#Features

• Structured JSONL changelog. Changelog entries are now backed by structured JSONL files in .rlsbl/changes/. Each entry maps a description to commit hashes with user_facing and type fields. rlsbl changelog add/validate/generate commands manage entries. rlsbl release auto-validates coverage and generates CHANGELOG.md. Pre-push blocks on missing coverage. rlsbl unreleased uses exact hash matching. rlsbl status shows coverage info. Scaffold creates the directory for new projects. changelog add auto-commits entries (with --no-commit opt-out). Coverage validation skips changelog-only commits. Internal commit logic centralized via commit_files helper. Pre-push hook compatible with strictcli argument handling.
• Changelog backfill script. scripts/backfill_changelog.py migrates an existing CHANGELOG.md into JSONL files by parsing entries, mapping them to commits via keyword matching, and writing per-version JSONL files.

#Fixes

• Fix: selfdoc CLI documentation. Replaced incompatible code-help directives with auto-generated CLI docs via selfdoc gen, fixing the build warning after the strictcli migration.
• Fix: monorepo commands commit without safegit. monorepo init, add, and sync now properly fall back to plain git when safegit is not installed, instead of silently skipping the commit.
• Fix: pre-push hook compatibility with strictcli. The pre-push hook no longer passes extra arguments that strictcli rejects. Release pushes (containing a version bump commit) skip the JSONL coverage check entirely since validation already ran during rlsbl release.

#0.24.0

#Features

• **rlsbl edit-release [version].** New command that updates GitHub Release notes from CHANGELOG.md. Auto-detects the current version if none is given. Supports --dry-run to preview without changes.

#0.23.1

• No user-facing changes.

#0.23.0

#Breaking

• Breaking: hooks are now scaffold-managed. pre-release.sh and post-release.sh are no longer user-owned. scaffold --update merges template improvements into existing hooks via three-way merge.
• **Breaking: rlsbl init removed.** The init alias for scaffold has been dropped. Use rlsbl scaffold directly.
• **Breaking: --registry flag removed.** Use --target instead. The --registry flag was deprecated since 0.20.0.

#Features

• Per-command help. CLI dispatch migrated to strictcli. Every command and monorepo subcommand now has its own --help with typed flags, arguments, and descriptions.
• Multi-ecosystem library lint. Library boundary lint now supports Go and npm in addition to Python. Go lint detects forbidden imports (net/http, cobra, urfave/cli), fmt.Println, and func main(). npm lint detects forbidden imports (express, koa, commander, etc.), console.log, and bin entry points.
• AST and regex lint backends. Each language has two lint implementations: tree-sitter AST (accurate, default) and regex (lightweight fallback). Select via parser = "regex" in .rlsbl/lint.toml.
• Per-language lint config. Lint rules are now configured in .rlsbl/lint/python.toml, go.toml, and npm.toml with [forbidden-imports], [stdout], and [entry-point] sections. Scaffold generates these with sensible defaults. The old lint.toml ignore list is deprecated; a warning is shown if detected.
• Built-in pre-release checks. rlsbl release now runs tests and lint automatically before releasing. No hook customization needed for standard checks. Skip with --skip-tests or --skip-lint.
• Two-hook model. New pre-checks.sh hook runs before built-in checks (for setup tasks). The existing pre-release.sh runs after (for custom validation).
• Standalone library lint. rlsbl doctor --check library-lint now works on any project, not just monorepo libraries.

#Fixes

• Fix: lint false positives from vendored code. The lint file walker no longer descends into .venv/, node_modules/, __pycache__/, and other non-source directories.

#0.22.1

#Features

• Name check short-circuiting. When a name is already taken, variant checking and GitHub repo lookups are now skipped, reducing API calls from 6 to 1-2 per taken name. Ultranormalization breaks after the first conflict instead of checking all 64 variants.
• Reason-specific explanations. Check results now explain WHY a name was rejected: stdlib module conflict, npm moniker collision, or visual similarity. Previously only the status ("taken") was shown.
• PyPI caveats for available names. Available PyPI names now always show the prohibited names list warning and suggest --ultranormalized-variants when the flag wasn't used.
• Steps-run summary. Verbose check output ends with a "Checked:" line listing which validations ran (registry, stdlib, variants, GitHub, ultranormalization, moniker similarity).
• Multi-name summary. Batch checks now print an aggregate summary ("N available, M taken") and the delay setting after the table.
• Rate limit retry visibility. HTTP 429 retries now print "Rate limited, retrying in Ns..." to stderr instead of sleeping silently.

#0.22.0

#Features

• Library boundary lint. Tag monorepo projects with library = true in workspace.toml (or monorepo add --library true) to enforce library discipline. rlsbl doctor --check library-lint detects forbidden imports (argparse, flask, click, etc.), print() calls, and CLI entry points in library source files via Python AST analysis. Logging usage is flagged as a warning. Violations block releases via the pre-release hook. Supports .rlsbl/lint.toml ignore lists for false positives.
• **Library column in monorepo status.** Shows which projects are tagged as libraries. Dynamic column — hidden when no projects have library = true.
• PyPI check: Simple API. Switched from the JSON API to the Simple API for availability checks. Fixes false "available" results for package names that are registered but have no releases.
• PyPI check: stdlib collision detection. Names that conflict with Python standard library modules (like queue, json, os) are now reported as taken without hitting the network.
• **PyPI check: --ultranormalized-variants.** New flag that generates visual-similarity variants (l/1/i and o/0 substitutions) and checks each against PyPI. Catches names like cli that PyPI rejects due to collision with cl1.
• npm check: moniker similarity detection. The npm check now queries the search API to detect moniker conflicts — names that npm considers identical after stripping punctuation. Catches cases like selfdoc conflicting with self-doc.
• **rlsbl doctor --check <name>.** Run a single diagnostic check by name instead of all checks. Useful in CI and pre-release hooks.

#Fixes

• Fix: scaffold template variable resolution for secondary targets. Multi-target projects (e.g., pypi+npm) no longer leave {{registryUrl}} unresolved when npm is a secondary target.

#0.21.2

#Features

• Hook output is now visible. Pre-release and post-release hooks stream stdout/stderr to the terminal in real-time. On failure, the actual exit code is shown instead of a generic error message.
• **RLSBL_HOOK_TIMEOUT environment variable.** Configure a timeout in seconds for release hooks. Default is no timeout (hooks run to completion), fixing the previous 120-second hard limit that silently killed long-running test suites.

#0.21.1

#Features

• **rlsbl release --allow-dirty.** Release with uncommitted changes in the working tree. Pre-existing dirty files are tracked and excluded from the unexpected-files safety check, so genuinely new unexpected files are still caught.
• **monorepo add passes --target to scaffold.** When an explicit target is specified (e.g., --target plain), it is forwarded to the scaffold subprocess instead of relying on auto-detection. Removes a special case where monorepo add pre-created a VERSION file for plain targets.

#0.21.0

#Features

• **Cross-registry depends_on in workspace.toml.** Monorepo projects can now declare explicit dependencies on siblings in any ecosystem: depends_on = ["framework"]. These edges are respected by release-order, counted in status Deps/Rdeps columns, and shown in outdated with status "explicit". Use monorepo add --depends-on name1,name2 to set them during project registration.
• **plain target for no-build-system projects.** Register template directories, shared config, or other non-code projects with monorepo add --target plain. Uses a plain VERSION file, creates GitHub Releases with changelog notes, but generates no CI or publish workflows. Standard tag format.
• **--target flag on monorepo add.** Explicitly specify any target type, bypassing auto-detection. Works for all registered targets, not just plain.
• Reusable npm binary wrapper. The platform-specific npm package distribution pattern (esbuild/biome/turbo-style) is now a shared module used by both Go and Zig targets. Platform list is configurable via npm_wrapper.platforms in project config.
• Zig target. New release target for Zig projects. Detects build.zig.zon, manages versions via VERSION file with best-effort .zon sync, generates CI (via mlugg/setup-zig) and publish workflows that cross-compile for 6 platforms from a single runner. Supports optional npm binary wrapper distribution.
• CI router fix for projects without workflows. monorepo sync no longer includes projects without CI workflows in the CI router, preventing references to non-existent workflow files.

#0.20.0

#Breaking

• **Breaking: rlsbl check now requires --target.** The implicit default of checking both npm and PyPI has been removed. Specify --target npm, --target pypi, or --target go explicitly.

#Features

• Multi-name checking. rlsbl check foo bar baz --target pypi checks multiple names in one invocation and prints a compact table. Single-name invocations still show the verbose format with variants.
• **Rate limiting for rlsbl check.** New --delay flag (default 200ms) throttles between names. HTTP 429 responses from PyPI/Go/GitHub trigger automatic retry with exponential backoff.
• **rlsbl monorepo check-names.** Batch-check name availability for all workspace projects. Supports --prefix and --suffix to evaluate namespacing strategies (e.g., --prefix www- --target pypi).
• **rlsbl monorepo outdated.** For each project, shows its intra-workspace dependency constraints against current sibling versions. Reports versioned deps as ok/outdated, and labels workspace/path references.
• **Dependency columns in rlsbl monorepo status.** New Deps and Rdeps columns show how many workspace siblings each project depends on and how many depend on it. Hidden when no intra-workspace dependencies exist.
• Monorepo-aware pre-push changelog check. The pre-push hook now detects monorepo context and only checks changelogs for projects whose files appear in the pushed commits.
• **Per-subcommand help for rlsbl monorepo.** Each subcommand now has its own --help with usage and description.
• Path dependency rewriting for PyPI. When building a PyPI package in a monorepo, path dependencies (e.g., core @ {root:uri}/../core) are automatically rewritten to versioned constraints in a temp copy. The working tree is never modified.
• **rlsbl monorepo release-order.** Shows the topological order to release projects in, based on intra-workspace dependencies. Detects cycles.

#0.19.1

• No user-facing changes.

#0.19.0

#Features

• **rlsbl deploy [name] command.** Deploy to configured targets via SSH with health checks (HTTP, TCP, script) and automatic rollback on failure. Configure targets in .rlsbl/config.json under the deploy key. Supports --dry-run to preview without executing and --force to override branch restrictions.
• Deploy CI workflow template. rlsbl scaffold generates a deploy workflow when deploy targets are configured.
• Project root discovery. rlsbl now finds the project root automatically, so commands work from any subdirectory (like git, cargo, npm).
• Scaffold untracks gitignored files. rlsbl scaffold runs git rm --cached on tracked files matching new .gitignore entries.
• **Monorepo: lock files moved to .rlsbl-monorepo/.** rlsbl release no longer creates a spurious .rlsbl/ directory at the repo root.
• Deploy after publish. rlsbl release runs deploy automatically after publish completes. Deploy failures do not undo the release — retry with rlsbl deploy <name>.

#0.18.1

#Features

• **env_file config key.** Set "env_file": "~/path/to/.env" in .rlsbl/config.json to load environment variables before release. Useful for secrets needed by target publish steps (e.g., CLOUDFLARE_API_TOKEN for docs deploys).

#0.18.0

#Breaking

• **Breaking: removed --include and --exclude flags from rlsbl release.** Target selection for releases is now config-only via release_targets in .rlsbl/config.json.

#Features

• Go binary distribution: Homebrew tap. Go binary projects can now scaffold Homebrew tap support. Set {"homebrew": {"tap": "homebrew-tap"}} in .rlsbl/config.json to add a brews: section to the goreleaser config and pass HOMEBREW_TAP_TOKEN to the publish workflow. Users install via brew install user/tap/tool.
• Go binary distribution: npm wrapper. Go binary projects can scaffold npm binary wrapper packages (the esbuild/biome/turbo pattern). Set {"npm_wrapper": {"scope": "@user"}} to generate platform-specific packages for 6 platforms (linux/darwin/win32, x64/arm64), a wrapper package with optionalDependencies, a bin script, and a publish workflow that packages goreleaser archives into npm packages. Users install via npm install -g @user/tool.

#0.17.0

#Features

• Cross-target metadata in templates. Multi-target projects now merge template variables from all targets during scaffold, not just the primary. Variables are namespaced by target ({{pypi.minRequiredPython}}, {{npm.minRequiredNode}}). CI templates include runtime version references from project manifests (requires-python, engines.node, go directive, rust-version).
• **rlsbl doctor: metadata consistency checks.** Three new checks validate that package name, license, and description are consistent across targets. Names are normalized per registry conventions (npm scope stripping, PyPI PEP 503, Go module path). Mismatches produce warnings, not failures.
• Per-target subdirectory paths. Targets can now live in subdirectories. Configure with {"name": "npm", "path": "npm/"} in the targets array (plain strings still default to project root). Version sync, build, publish, doctor, status, and scaffold all resolve per-target paths. Useful for projects that ship wrapper packages alongside the main artifact.

#0.16.1

#Features

• npm scaffold: lockfile warning. rlsbl scaffold now warns when an npm project has no lockfile (package-lock.json, pnpm-lock.yaml, or yarn.lock) and adds a "run npm install" step to the next steps output. Prevents broken CI from npm ci failing on first push.

#0.16.0

#Features

• **rlsbl doctor command.** Diagnoses release state with 7 checks: stale lock file, version consistency across targets, local/remote tag existence, GitHub Release existence, branch sync, changelog coverage. --fix auto-repairs safe issues (stale locks, missing remote tags, missing GitHub Releases).
• Lock file hardening. .rlsbl/lock added to gitignore template. atexit handler ensures lock cleanup on process exit. New is_stale() helper for doctor.
• Go scaffold: goreleaser ldflags. Goreleaser template now includes -X main.version={{.Version}} for version injection at build time.
• Go scaffold: dynamic goreleaser main field. main: field auto-detects root vs cmd/<name>/ project structure via {{goreleaserMain}} template variable.
• Go scaffold: version.go generation. Binary Go projects get a scaffolded version.go with ReadBuildInfo fallback for go install users. Libraries are excluded.
• npm: package manager detection. NpmTarget detects pnpm, yarn, or npm by searching for lock files from the project directory up to the git root.
• npm: per-manager CI and publish templates. Separate CI and publish workflow templates for npm, pnpm, and yarn. pnpm templates include pnpm/action-setup@v4. All CI templates now include an install step before testing.

#0.15.0

#Features

• Deleted built-in config migration engine. Removed rlsbl/lib/ (ConfigMigrator, schema_loader, ~440 LOC), the rlsbl config subcommand tree, and all associated tests (~1,500 LOC). Config migrations are now handled by the external migrable tool.
• **rlsbl migrate command.** Shells out to migrable migrate --config-dir .rlsbl. Supports --dry-run and --status. Gives install instructions if migrable is not found.
• **--json flag for rlsbl status.** Outputs structured JSON with name, version, target, branch, tag, clean, changelog, ci, publish.
• Documented hidden flags. --no-commit and --skip-shared now appear in rlsbl scaffold --help.
• Go root main detection. rlsbl scaffold warns when a Go project has its main package in cmd/<name>/ instead of the project root, since go install module@latest won't work.

#0.14.0

#Features

• Router watch paths. Projects in a monorepo can declare extra file patterns to watch via --watch on monorepo add or the watch key in workspace.toml. The CI router generates multi-line path filters including both the project directory and all watch entries.
• Swift target split. New swift-apple target for Apple-platform Swift projects (macOS-only CI). The existing swift target keeps macOS+ubuntu for server-side Swift. swift-apple requires explicit declaration in .rlsbl/config.json (no auto-detection).
• Subtree publishing. Monorepo projects with subtree_remote configured get automatic git subtree pushes after release. The project's subdirectory is split and pushed to a mirror repo with plain semver tags, enabling SPM consumption. A GitHub Release is also created on the mirror. Failures are non-fatal.
• Explicit target enforcement. rlsbl scaffold now warns when using auto-detected targets and always writes the detected target to .rlsbl/config.json, ensuring subsequent runs use explicit config.
• **monorepo status enhanced.** Optional Watch column (path count) and Remote column (subtree URL) appear when projects use these features.
• **monorepo sync warns for Swift projects** without subtree_remote, since SPM can't resolve monorepo-style prefixed tags.
• 12 registered targets. swift-apple joins npm, pypi, go, swift, cargo, deno, docker, hex, maven, spec, docs.

#0.13.1

#Features

• **Monorepo sync adds working-directory.** Synced CI workflows now include defaults: run: working-directory: {path} so steps run in the correct project subdirectory.
• Monorepo add shows guidance. When no target is detected, the error now suggests which manifest files to create.
• Dynamic merged publish workflows. Multi-target projects now get dynamically generated publish workflows composed from each target's individual template. Supports all 11 targets, replaces the static npm+pypi+go-only merged template.

#0.13.0

#Features

• Monorepo support. New rlsbl monorepo command family for managing multi-project repos with independent versioning. Projects remain fully standalone — extracting to a solo repo requires zero config changes. - monorepo init creates a .rlsbl-monorepo/workspace.toml workspace manifest. - monorepo add <path> registers a project (auto-detects target, auto-scaffolds, auto-syncs CI). - monorepo remove <path> unregisters a project. - monorepo list shows all registered projects. - monorepo status shows version, latest tag, target, and unreleased changelog entries per project. - monorepo sync copies per-project CI workflows to root, rewrites triggers to workflow_call, generates a CI router (paths-filter dispatch) and publish router (tag-prefix dispatch), sets copies read-only with source header.
• Scoped releases in monorepos. rlsbl release inside a monorepo project automatically prefixes tags ([email protected]), scopes version reads/writes and changelog to the project subdirectory, and uses a scoped commit message.
• **Monorepo-aware rlsbl status.** Shows monorepo tag format and project count hint when inside a monorepo project.
• Scaffold triggers monorepo sync. Running rlsbl scaffold inside a monorepo project automatically syncs workflows to root.

#0.12.0

#Features

• 7 new release targets. swift (SPM), cargo (Rust/crates.io), deno (JSR), hex (Elixir/hex.pm), maven (Gradle/Maven), docker, spec (versioned specifications). Each with CI/publish templates and hybrid publish support.
• Opt-in target config. Projects declare targets in .rlsbl/config.json "targets" array. Auto-detection remains as fallback for existing projects.
• Hybrid publish. rlsbl release publishes locally when ecosystem token is available (NPM_TOKEN, CARGO_REGISTRY_TOKEN, HEX_API_KEY, etc.). Falls back to CI otherwise.
• Private registry workflow. rlsbl scaffold --private (or auto-detected) skips publish.yml, generates a post-release hook that uploads artifacts to GitHub Releases. Prints consumer install instructions.
• tomlkit replaces TOML regex. pyproject.toml editing (version bumps, keyword injection) now uses tomlkit for correct round-trip editing with comment preservation. Fixes edge cases with [project.urls] sub-tables.
• detect_targets() covers all targets. Auto-detection now finds all 11 registered targets, not just npm/pypi/go.

#0.11.3

#Features

• **--include/--exclude release flags.** Control which targets run during release. Replaces --skip-docs.
• **release_targets config.** Declare baseline targets in .rlsbl/config.json to avoid auto-detect surprises.

#0.11.2

#Features

• Watch re-polls for late-starting workflows. After initial runs complete, waits 5 seconds and re-polls for workflows that started late (e.g., Publish triggered by GitHub Release creation). Fixes missing Publish detection.

#0.11.1

#Features

• Release aborts if behind remote. Fetches origin before releasing and exits if local branch is behind. Use --skip-remote-check for offline releases.
• Watch reports which workflows ran. After CI completes, prints a summary table of workflow names and results. Warns if a publish workflow exists on disk but didn't trigger.

#0.11.0

#Features

• Docs system extracted to selfdoc. rlsbl docs commands removed. DocsTarget now detects selfdoc.json and delegates to the selfdoc CLI. Install selfdoc separately for documentation generation.
• **rlsbl check includes GitHub repo search.** Shows repo count as informational context (not an availability check) after registry checks.
• Codehome target removed. The plugin target and rlsbl register command were premature and have been removed pending a more mature design.

#0.10.1

#Features

• Codehome target rewrite. Now root-scoped: each plugin (or plugin group) lives in its own repo with plugin.json. Standard v1.2.3 tags, no namespacing. Push is delivery.
• **rlsbl register command.** Prints the JSON registry entry for the current plugin repo (name, repo URL, description, plugins provided).
• Scaffold template for codehome. rlsbl scaffold --target codehome creates CI workflow that validates plugin.json.
• Plugin validation. Release validates plugin.json has required fields (name, version, description) and valid semver.

#0.10.0

#Features

• Codehome plugin target. --target codehome --scope plugins/<name> releases individual plugins from a monorepo. Reads/writes plugin.toml, creates namespaced tags ([email protected]).
• Docs target. Auto-generate documentation from Python docstrings and deploy to Cloudflare Pages or GitHub Pages. rlsbl docs init/build/serve/deploy commands. Zero external dependencies (stdlib ast + built-in MD/HTML converter).
• **rlsbl targets command.** Lists all available targets with detection status, scope type, and version file.
• Multi-target release. Secondary root-scoped targets (e.g., docs) auto-run build+deploy during release. Use --skip-docs to opt out.
• **--target and --scope CLI flags.** --target selects the release target explicitly. --scope restricts operations to a subdirectory for subdir-scoped targets.
• Scoped release safety. Validates scope path exists, includes pyproject.toml in commit for plugin targets, warns when --scope is used with root-scoped targets.
• **--registry deprecated.** Use --target instead. Prints a deprecation warning when used.

#0.9.1

#Features

• **rlsbl config show subcommand.** Bare rlsbl config now prints help; use config show for project info.
• Race condition parsing fix. Porcelain parser handles stripped leading whitespace correctly.

#0.9.0

#Features

• **rlsbl unreleased command.** Lists commits since last tag, cross-references CHANGELOG entries, reports coverage status. Supports --json for machine-readable output.
• **rlsbl prs command.** Lists open GitHub pull requests for the current repo.
• Config management system. rlsbl config init/migrate/status subcommands for managing project config with schema-driven migration (deep merge, flat merge, list-by-key merge strategies, versioned migrations, atomic writes).
• Scaffold auto-commits. Created files are committed automatically (use --no-commit to opt out). Runs config migrations when .rlsbl/config-schema.json exists.
• Parallel watch. rlsbl watch polls CI runs concurrently (total time = max of all runs, not sum).
• Parallel variant checking. rlsbl check uses ThreadPoolExecutor for concurrent registry queries.
• Advisory lockfile. .rlsbl/lock prevents concurrent release/scaffold operations.
• **rlsbl undo improvements.** Auto-pushes revert commit (with confirmation prompt, or automatic with --yes). Prints structured failure summary table with remediation commands on partial failure.
• Pre-release suffix support. bump_version handles versions like 1.0.0-beta.1.
• **--force no longer overwrites user-owned files.** CHANGELOG.md, LICENSE, and hooks are preserved even with --force.
• **Pre-release hook receives RLSBL_VERSION.** Matches the existing post-release hook behavior.
• Release race condition fix. Aborts if unexpected files are modified before commit.
• Top-level error handler sanitized. No longer exposes sensitive CalledProcessError details.
• Discover hardened. Pagination capped at 20 pages; retries once on HTTP 403 with Retry-After header.
• **record-gif validates flags.** Clear error message on non-integer flag values.
• Release prompt mentions ecosystem tagging when enabled.
• npm check timeout. Variant checking has 10-second subprocess timeout.

#0.8.3

#Features

• Pre-release hook runs Python checks before npm (faster failure)
• Go CI template uses go-version-file: go.mod instead of hardcoded versions; adds -race flag
• Node.js 24 in all CI/publish templates (dropped Node 18 EOL)

#Fixes

• Fix watch: resolve short SHAs to full 40-char (gh run list --commit requires it)

#0.8.2

#Features

• Handle KeyboardInterrupt in watch command (clean exit, no stack trace)
• Escape AppleScript strings in watch notifications (prevents injection via git tags)
• Clear error when --registry is missing a value
• Resolve project config path at call time (not module import time)
• Add --width, --height, --font-size, --duration flags to record-gif

#0.8.1

#Features

• Templates included in wheel. Moved templates/ into the rlsbl/ package so non-editable installs (pip, pipx) get them. Previously rlsbl scaffold crashed on PyPI installs.
• **undo checks prerequisites.** Now verifies gh CLI auth and clean working tree before proceeding.
• TOML trailing comma fix. Adding the rlsbl keyword no longer produces a double comma.
• **Pagination URL validation in discover.** Only follows Link header URLs pointing to api.github.com.
• **.rlsbl/version included in release commit.** No more orphaned version marker changes.
• Non-ASCII preserved in package.json. json.dumps now uses ensure_ascii=False.

#0.8.0

#Features

• Universal three-way merge for scaffold updates. Replaced all format-specific merge strategies (YAML job-level, JSON deep-merge, line-based, section append) with git merge-file. Bases are stored in .rlsbl/bases/ at scaffold time. On --update, user customizations and template updates merge cleanly; conflicts get git-style conflict markers.
• **Removed ruamel-yaml dependency.** No longer needed since YAML-aware merging is replaced by three-way text merge.
• Detailed scaffold output. Every file now shows its action: created, updated, merged, unchanged, user-owned, or CONFLICTS.

#0.7.0

#Features

• **Removed check-prs command.** Was a useless wrapper around gh pr list.
• **JSON deep-merge for .claude/settings.json.** Scaffold now merges new template keys into existing user settings instead of skipping the file. User values are preserved.
• YAML job-level merge for CI workflows. ci.yml and publish.yml are now merged at the job level: rlsbl-managed jobs are updated, user-added jobs are preserved. Uses ruamel.yaml for comment-preserving round-trip parsing.
• Explicit USER_OWNED category. CHANGELOG.md, LICENSE, and hooks are formally marked as user-owned and never overwritten.
• LICENSE year update. scaffold --update extends the copyright year range to the current year.

#0.6.0

#Features

• Scripts moved to subcommands. check-prs.sh, record-gif.sh, and pre-push-hook.sh are no longer scaffolded into scripts/. They are now built-in subcommands: rlsbl record-gif, rlsbl pre-push-check.
• **rlsbl watch command.** Monitors all CI runs for a commit, prints results to stderr, sends desktop notification, exits 1 on failure. rlsbl release prints Watch CI: rlsbl watch <sha> for easy invocation.
• Removed built-in background CI watcher from rlsbl release. Use rlsbl watch explicitly instead.
• **Hooks moved to .rlsbl/hooks/.** pre-release.sh and post-release.sh moved from scripts/ to .rlsbl/hooks/. rlsbl release looks for hooks there.
• Pre-push hook is a one-liner. .git/hooks/pre-push now calls exec rlsbl pre-push-check "$@" instead of being a full script copy. Updates happen via uv tool upgrade rlsbl, not re-scaffolding.

#0.5.2

#Features

• Version detection reads source tree first. __version__ now reads pyproject.toml directly when running from source, fixing stale metadata from editable installs.
• CLAUDE.md template is registry-specific. Publish setup instructions (NPM_TOKEN, Trusted Publishing, GoReleaser) now match the project's registry instead of always showing NPM_TOKEN.
• Gitignore merge normalizes trailing slashes. *.egg-info/ and *.egg-info are now recognized as duplicates during scaffold merge.
• **record-gif.sh no longer hardcodes /tmp/.** Uses bare mktemp for portability.
• **Go check hidden by default in rlsbl check.** Only shown with --registry go. Labels changed from "available"/"taken" to "not found"/"exists" since Go modules use repository paths.
• **Auth hint on 403 in rlsbl discover.** Suggests gh auth login when rate-limited.

#0.5.1

#Features

• CI watcher prints to stderr. The background CI watcher now writes results to inherited stderr instead of attempting tty detection. AI agents and terminal users both see CI pass/fail in their output stream. On failure, the GitHub Actions run URL is printed.
• ***.local-only gitignore pattern.** Scaffolded .gitignore now includes *.local-only. Use a .local-only/ directory or *.local-only suffix to keep files out of version control without per-file gitignore entries.

#0.5.0

#Features

• Post-release hooks. scripts/post-release.sh runs after a successful release with RLSBL_VERSION env var set. Non-fatal (release is already complete). Scaffolded via rlsbl scaffold.
• CI watcher. After pushing, rlsbl spawns a background process that watches CI via gh run watch and sends a desktop notification (notify-send on Linux, osascript on macOS) when CI passes or fails.
• Ecosystem discoverability: rlsbl discover command lists all rlsbl-tagged projects via GitHub topics
• rlsbl config shows ecosystem tagging status and source
• --quiet flag is respected by all tagging output
• Auto-tagging: scaffold and release inject "rlsbl" keyword into package.json/pyproject.toml and add the rlsbl GitHub topic
• Opt-out via --no-tag flag, project config (.rlsbl/config.json), or user config (~/.rlsbl/config.json)
• rlsbl discover --mine filters to the authenticated user's repos

#0.4.2

#Features

• Configurable push timeout via RLSBL_PUSH_TIMEOUT env var (default 120s), fixing timeouts on repos with slow pre-push hooks
• Print a note when RLSBL_PUSH_TIMEOUT overrides the default

#Fixes

• Fix own pre-push hook missing VERSION file detection for Go projects

#0.4.1

#Features

• Go adapter uses VERSION file as version source (not git tags)
• First release bootstraps from VERSION without bumping
• Pre-release.sh template auto-detects Go/npm/Python and runs appropriate checks
• Pre-push hook template supports Go VERSION file
• GoReleaser NEXT_STEPS clarified (CI handles it, no local install needed)

#0.4.0

#Features

• Go project support: scaffold with GoReleaser, CI, and publish workflows
• Version-file-less registries: release skips commit step when version is the git tag
• Go name availability check via pkg.go.dev
• Cross-compilation template (linux/darwin/windows x amd64/arm64)

#0.3.1

• No user-facing changes.

#0.3.0

#Features

• Confirmation prompt on release (skip with --yes)
• config command: show detected registries, scaffolding state, workflows, hooks
• undo command: revert a botched release (deletes tag, reverts commit, deletes GitHub Release)
• Merged publish workflow for dual-registry projects (scaffold generates one file with both npm + pypi jobs)

#0.2.0

#Features

• CLI redesign: --registry flag replaces positional registry argument
• Rename check-name command to check
• All commands are top-level: rlsbl release, rlsbl check, rlsbl scaffold, rlsbl status

#Fixes

• Fix astral-sh/setup-uv version (v7, not v8)

#0.1.1

#Fixes

• Fix astral-sh/setup-uv version (v8 tag doesn't exist, use v7)

#0.1.0

#Features

• 4 top-level commands: release, status, scaffold, check-name
• Initial release as rlsbl (renamed from share-it-on)
• Pure Python (stdlib only, Python 3.11+, tomllib for TOML parsing)
• Auto-detects registries from project files (package.json, pyproject.toml)
• Release syncs version across all detected version files
• Context-aware scaffold: appends CLAUDE.md, merges .gitignore, preserves custom CI
• Hash-based --update mode detects customized files
• Pre-release hook, pre-push changelog enforcement
• Dual-publish CI: npm (token) + PyPI (OIDC Trusted Publishing)
• Also installable via npm (thin Node wrapper)