[github-actions]

🤖 I have created a release beep boop

0.9.0 (2026-10-29)

Features

• cli: add skillx add to install skills from GitHub, git URLs or local paths (#120) (b53007c)
• cli: lock, update and sync skills from skillx add; project scope, several runtimes, commit refs (#168) (c95ab77)
• web: creator dashboard with visibility, soft delete and restore (#162) (a81117b)

---

This PR was generated with Release Please. See documentation.

[clark-cant]

Verified the diff at head 778f34b.

• Version trio exact: .release-please-manifest.json, packages/cli/package.json and the new packages/cli/CHANGELOG.md header all move 0.8.0 → 0.9.0.
• Changelog is exact under release-please's path filter. Of the 7 commits since skillx-sh-v0.8.0, exactly three touch packages/cli: b53007c (#120), a81117b (#162 — src/commands/release-publish.ts, src/built-cli.test.ts) and c95ab77 (#168). All three are the only entries. 25dabca, 268221c, f702a64 and d34fecd touch zero CLI paths and are correctly absent. There is no fix(cli) commit in range, so leaving out a "Bug Fixes" section is correct. bump-minor-pre-major plus two feat commits is what produces the 0.9.0 minor bump.
• No publish break from #168's new @skillx/skill-tree devDependency. packages/cli/tsup.config.ts already lists it in noExternal alongside @skillx/contracts, so it is inlined into dist and is never resolved from the registry at install time.
• Release state is still pending, as expected. npm view skillx-sh dist-tags = 0.8.0 and there is no skillx-sh-v0.9.0 tag. Publishing happens in the publish job of release-cli.yml on the push that merges this PR: it builds, runs node packages/cli/bin/skillx.js --version|--help|release publish --help, then vitest packages/cli/src/built-cli.test.ts, then npm publish with OIDC provenance — the #73 bundling guard is intact.

Blocker: the PR checks run for 778f34b was created at 19:53:04Z and concluded action_required — the release branch is bot-authored, so the workflow is waiting for a maintainer to approve the run. That is why statusCheckRollup is empty: CI has not actually executed on the release commit. A maintainer needs to approve that pending run.

Approval is withheld in this pass on purpose: merging publishes skillx-sh@0.9.0 to npm, and doing that with no executed CI gate is the owner's call rather than an automated one.