Template release process

Prepare the source change

Edit product/ and template/, keeping the release manifest and embedded inventory consistent. Set VERSION and write release/requests/template/<version>.md. Its body supplies release notes; an explicit changelog: reset controls a published changelog reset.

Validate and assemble

sh scripts/check-release.sh
sh scripts/build-dist.sh

The workspace artifact excludes the published repository's own README, license, changelog, contribution and security pages, and artwork. Publication restores those separately and marks them export-ignore for workspace archives.

Publish only when authorized

scripts/publish-template.sh prepares a clean destination checkout, commits, and tags it. It refuses a destination holding changed, untracked, or ignored files. Push and hosted release creation are separate caller actions.

The publish workflow runs the CLI job before the template job so a new template pin never points at an unpublished CLI. Each job still resolves its own version independently. Inspect the pinned workflow below before using the publication machinery.