ci(release)!: adopt simplified shared release flow

.gitattributes

@@ -1,63 +1,6 @@
-###############################################################################
-# Set default behavior to automatically normalize line endings.
-###############################################################################
-* text=auto
+# Enforce LF line endings everywhere — oxfmt writes LF and is not configurable.
+# This prevents CRLF/LF churn on Windows checkouts.
+* text=auto eol=lf
 
-###############################################################################
-# Set default behavior for command prompt diff.
-#
-# This is need for earlier builds of msysgit that does not have it on by
-# default for csharp files.
-# Note: This is only used by command line
-###############################################################################
-#*.cs     diff=csharp
-
-###############################################################################
-# Set the merge driver for project and solution files
-#
-# Merging from the command prompt will add diff markers to the files if there
-# are conflicts (Merging from VS is not affected by the settings below, in VS
-# the diff markers are never inserted). Diff markers may cause the following 
-# file extensions to fail to load in VS. An alternative would be to treat
-# these files as binary and thus will always conflict and require user
-# intervention with every merge. To do so, just uncomment the entries below
-###############################################################################
-#*.sln       merge=binary
-#*.csproj    merge=binary
-#*.vbproj    merge=binary
-#*.vcxproj   merge=binary
-#*.vcproj    merge=binary
-#*.dbproj    merge=binary
-#*.fsproj    merge=binary
-#*.lsproj    merge=binary
-#*.wixproj   merge=binary
-#*.modelproj merge=binary
-#*.sqlproj   merge=binary
-#*.wwaproj   merge=binary
-
-###############################################################################
-# behavior for image files
-#
-# image files are treated as binary by default.
-###############################################################################
-#*.jpg   binary
-#*.png   binary
-#*.gif   binary
-
-###############################################################################
-# diff behavior for common document formats
-# 
-# Convert binary document formats to text before diffing them. This feature
-# is only available from the command line. Turn it on by uncommenting the 
-# entries below.
-###############################################################################
-#*.doc   diff=astextplain
-#*.DOC   diff=astextplain
-#*.docx  diff=astextplain
-#*.DOCX  diff=astextplain
-#*.dot   diff=astextplain
-#*.DOT   diff=astextplain
-#*.pdf   diff=astextplain
-#*.PDF   diff=astextplain
-#*.rtf   diff=astextplain
-#*.RTF   diff=astextplain
+# Lockfiles — keep LF, mark as generated for diff/PR collapsing
+pnpm-lock.yaml -diff linguist-generated=true

.github/workflows/cd.yml

@@ -8,6 +8,10 @@ on:
       - "workflow"
     paths-ignore:
       - "**.md"
+      - ".agents/**"
+      - ".claude/**"
+      - ".codex/**"
+      - "skills-lock.json"
 
   workflow_dispatch:
     inputs:
@@ -28,14 +32,20 @@ permissions:
   packages: write # required for package publish
   pull-requests: write # required for release PR creation
 
+concurrency:
+  group: package-release-${{ github.repository }}
+  cancel-in-progress: false
+  queue: max
+
 jobs:
   publish:
     name: Publish
     if: |
-      contains(fromJSON('["main", "workflow"]'), github.ref_name) ||
-      startsWith(github.ref_name, 'v') ||
-      github.event.inputs.publish == 'true'
-    uses: sketch7/.github/.github/workflows/dotnet-publish.yml@dotnet-libs-v2
+      (github.event_name != 'push' || github.event.created == false) &&
+      (contains(fromJSON('["main", "workflow"]'), github.ref_name) ||
+       startsWith(github.ref_name, 'v') ||
+       github.event.inputs.publish == 'true')
+    uses: sketch7/.github/.github/workflows/dotnet-publish.yml@dotnet-libs-v3
     with:
       force-preid: ${{ github.event.inputs.force-prerelease == 'true' }}
     secrets:
@@ -49,7 +59,7 @@ jobs:
       needs.publish.result == 'success' &&
       github.event_name == 'push' &&
       github.ref_name == 'main'
-    uses: sketch7/.github/.github/workflows/prepare-release.yml@release-v1
+    uses: sketch7/.github/.github/workflows/prepare-release.yml@release-v2
     with:
       base-version: ${{ needs.publish.outputs.baseVersion }}
     secrets:
@@ -58,11 +68,8 @@ jobs:
   release:
     name: Release
     needs: publish
-    # Only when a stable (non-prerelease) version was published — i.e. on push to v* branches
-    if: |
-      needs.publish.result == 'success' &&
-      !fromJSON(needs.publish.outputs.isPrerelease)
-    uses: sketch7/.github/.github/workflows/create-release.yml@release-v1
+    if: needs.publish.result == 'success'
+    uses: sketch7/.github/.github/workflows/create-release.yml@release-v2
     with:
       version: ${{ needs.publish.outputs.version }}
 
@@ -74,6 +81,8 @@ jobs:
       needs.release.result == 'success' &&
       needs.release.outputs.is-latest == 'true' &&
       github.event_name == 'push'
-    uses: sketch7/.github/.github/workflows/node-bump-main.yml@release-v1
+    uses: sketch7/.github/.github/workflows/node-bump-main.yml@release-v2
     with:
       released-version: ${{ needs.publish.outputs.version }}
+    secrets:
+      token: ${{ secrets.GH_PAT }}

.github/workflows/ci.yml

@@ -3,18 +3,25 @@ name: CI
 on:
   push:
     branches:
-      - main
-      - "v*"
       - "workflow"
     paths-ignore:
       - "**.md"
+      - ".agents/**"
+      - ".claude/**"
+      - ".codex/**"
+      - "skills-lock.json"
 
   pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
     branches:
       - main
       - "v*"
     paths-ignore:
       - "**.md"
+      - ".agents/**"
+      - ".claude/**"
+      - ".codex/**"
+      - "skills-lock.json"
 
 permissions:
   contents: read
@@ -25,4 +32,4 @@ permissions:
 jobs:
   ci:
     name: dotnet ci
-    uses: sketch7/.github/.github/workflows/dotnet-ci.yml@dotnet-libs-v2
+    uses: sketch7/.github/.github/workflows/dotnet-ci.yml@dotnet-libs-v3