From 1938063b7e7956530a33ecc5347bba7c7f97e567 Mon Sep 17 00:00:00 2001 From: Erin Spencer Date: Mon, 14 Sep 2026 10:20:01 -0700 Subject: [PATCH 1/3] chore(release): bump pubskill-lib to 0.2.1 --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 8979dcc..97c728b 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta" [project] name = "pubskill-lib" -version = "0.2.0" +version = "0.2.1" description = "Public inspect CLI for evidence-led repository findings" readme = "README.md" requires-python = ">=3.11" From d8dc2367c9139822ba833d56dfbaece08e8b5b73 Mon Sep 17 00:00:00 2001 From: Erin Spencer Date: Mon, 14 Sep 2026 10:20:07 -0700 Subject: [PATCH 2/3] chore(release): align package version --- src/pubskill_lib/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pubskill_lib/__init__.py b/src/pubskill_lib/__init__.py index 2dc25a9..a9f2ae8 100644 --- a/src/pubskill_lib/__init__.py +++ b/src/pubskill_lib/__init__.py @@ -1,3 +1,3 @@ """pubskill-lib: public inspect CLI for evidence-led repository findings.""" -__version__ = "0.2.0" +__version__ = "0.2.1" From 83749133f01a32fab9999ad6710acc941538e49c Mon Sep 17 00:00:00 2001 From: Erin Spencer Date: Mon, 14 Sep 2026 10:20:31 -0700 Subject: [PATCH 3/3] docs(release): distinguish source version from published tags --- README.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 0ff80cd..ea9db6a 100644 --- a/README.md +++ b/README.md @@ -6,7 +6,7 @@ Clone this repo when you want a command that inspects a local repository and wri ## Status -The inspect CLI version is `0.2.0`. Published versions and their immutable +The current source version is `0.2.1`. Published versions and their immutable artifacts are listed on [GitHub Releases](https://github.com/The-Interdependency/pubskill-lib/releases). | Claim | State | @@ -30,7 +30,7 @@ python -m unittest discover -s tests python -m pubskill_lib.audit examples/neglected-repo --out /tmp/findings.json ``` -Those commands are the definition of done for the first utility tag (`v0.2.0`). They run in GitHub CI from a clean checkout; publish the tag only after the release gate is explicitly completed. +Those commands defined done for the first utility tag (`v0.2.0`) and remain the baseline for the `0.2.x` line. Publish a new tag only after the release gate is explicitly completed for that exact source. ## Reproduce release artifacts @@ -59,7 +59,13 @@ The wheel retains its canonical skill-lib source pin without requiring a checkou Download the wheel, source archive, manifest, and `SHA256SUMS` from the chosen release. Verify the downloaded files with `sha256sum -c SHA256SUMS`, then install -the verified wheel with `python -m pip install --no-deps ./pubskill_lib-0.2.0-py3-none-any.whl`. +the verified wheel after substituting that release's version: + +```bash +VERSION=0.2.0 +python -m pip install --no-deps "./pubskill_lib-${VERSION}-py3-none-any.whl" +``` + Checksums establish byte identity; they are not a signature or a blanket health claim. ## Inspect CLI