How ɳSelf CLI releases are built, tagged, and distributed.

Two files must be updated for a release:

Both must match exactly before tagging.

The nself release <ver> command validates the version argument against an anchored semver regexp before any exec call:

^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$

Strings containing shell metacharacters (;, &&, $(), backticks) are rejected at entry. This prevents shell injection via the version argument.

The release command updates web subapp package.json files and README version badges using injection-safe patterns:

• Web version bumps (nself release <ver> step 7): invokes node --eval <script> with the version passed as the NSELF_VERSION environment variable. The version is never interpolated into the shell command string.
• README badge sync (step 9): uses Go-native regexp.ReplaceAll on each README.md file directly. No shell or sed invocation.

Releases use semantic versioning with a v prefix:

v1.0.0       # stable release
v1.0.1       # patch release
v1.1.0       # minor release
v2.0.0       # major release
v1.0.0-rc.1  # release candidate

The CI release workflow (.github/workflows/release.yml) triggers automatically on a version tag push:

# 1. Update version files
# 2. Commit
git commit -m "release: v1.0.0"

# 3. Tag
git tag v1.0.0

# 4. Push tag (triggers CI)
git push origin v1.0.0

The workflow:

1. Runs tests and linting
2. Cross-compiles for all targets (Linux/macOS/Windows x amd64/arm64)
3. Creates release archives (.tar.gz and .zip)
4. Uploads artifacts to the GitHub Release
5. Generates release notes from commit history

The homebrew-nself tap auto-updates when a new GitHub Release is published. No manual action required, the formula reads the latest release tag from GitHub.

Homebrew lockstep gate: The workflow .github/workflows/homebrew-version-lockstep.yml runs on every v*.*.* tag push. It reads the Homebrew formula version from nself-org/homebrew-nself/Formula/nself.rb via the GitHub API and fails if the formula version does not match the tag being cut. If the gate fails: update the formula in homebrew-nself first (version string + sha256), then re-tag on cli. Never cut a CLI tag while the formula is behind. This gate closes the gap that allowed v1.0.6/v1.0.7/v1.0.8 to ship without Homebrew formula sync (S30-T02).

The installer at install.nself.org is hosted in a separate repo. Update the version reference in install.sh after the GitHub Release is live.

After the release:

1. Write GitHub Release notes highlighting new features and breaking changes
2. Update Changelog with the release summary
3. Post to ɳSelf community channels

• Contributing, how to contribute code
• Dev-Setup, local development setup
• Changelog, version history

← Home | _Sidebar