# Release Openshell

Pick the latest qualified OpenShell prerelease and tag its commit as stable.

- Repository: https://github.com/NVIDIA/OpenShell (20903 stars)
- Category: Git and review
- License: Apache-2.0
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add NVIDIA/OpenShell --skill release-openshell -g -a claude-code -y`
Codex: `npx skills add NVIDIA/OpenShell --skill release-openshell -g -a codex -y`
Cursor: `npx skills add NVIDIA/OpenShell --skill release-openshell -g -a cursor -y`
Gemini CLI: `npx skills add NVIDIA/OpenShell --skill release-openshell -g -a gemini-cli -y`

## Description

Pick the latest qualified OpenShell prerelease and tag its commit as stable. Create and qualify a prerelease first when none exists.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Release OpenShell

For the intended release version and branch, inspect the latest passing
prerelease and changes since the previous stable release. Present the candidate
to the maintainer. Once approved, dispatch Release from that branch:

```shell
gh workflow run release.yml --ref main
```

Without `tag`, Release detects the highest prerelease version reachable from the
selected branch, then selects its highest-numbered passing candidate. It stops
if that version has no qualified candidate or already has a stable tag. Supply
`-f tag=vX.Y.Z` to select a version explicitly or retry a stable release.

Use the support branch instead of `main` for a previous minor version. That
branch must contain the updated release workflows. Release selects the
highest-numbered `vX.Y.Z-pre.N` reachable from that branch with a
successful Pre-release run triggered by that tag or dispatched on the same branch,
and matching passing `release-tag-v1` qualification evidence. Missing or expired evidence blocks
promotion. Inspect the selected candidate in the promotion job summary.
The entire Pre-release run must succeed, including publication. If qualification
passed but publication failed, rerun the failed jobs before promoting the candidate.

Release creates `vX.Y.Z` at that exact commit, then rebuilds and publishes all
stable artifacts without rerunning qualification. Embedded versions change, so
stable artifacts are not byte-identical to the qualified prerelease. An existing
stable tag may be retried only if it already points to the selected commit.
Stable images are saved as OCI archives during the build and pushed under the
stable version tags during publication. Their SBOMs are verified before updating
`latest`; the qualified prerelease's commit-SHA image tags remain unchanged.

The rest: https://github.com/NVIDIA/OpenShell/blob/HEAD/.agents/skills/release-openshell/SKILL.md