@flytedan/flytebot-design-system 0.33.0 → 0.35.0

package/README.md

@@ -112,6 +112,12 @@ bash scripts/release.sh <new-version> "<summary>"
 - refuses a dirty tree, and takes a `.release.lock` so two runs can't overlap;
 - fetches `origin` and checks out `origin/main`'s exact tip — never unmerged
   work;
+- re-executes the `scripts/release.sh` it just checked out, handing over the
+  lock, so every later step (gates, bump, publish) is the released commit's
+  own script, never the one that was on disk before the checkout (bash reads a
+  script from the file it opened). The second pass is marked by
+  `RELEASE_REEXEC_SHA`, which carries the checked-out commit: it asserts `HEAD`
+  is that commit and skips the fetch and checkout;
 - installs with `pnpm install --frozen-lockfile`;
 - runs the gates: `tsup`, then straight away the checks of that build
   (`vitest run --config scripts/vitest.dist.config.ts`), then `vitest run`,
@@ -127,8 +133,9 @@ bash scripts/release.sh <new-version> "<summary>"
   success.
 
 `scripts/release.test.ts` covers its guards (wrong directory, dirty tree,
-held lock, missing/malformed version argument) against throwaway git repos —
-no network, no real publish.
+held lock, missing/malformed version argument) and the re-execution (a fake
+origin whose `release.sh` changed runs the new body; the second pass's `HEAD`
+and lock checks) against throwaway git repos — no network, no real publish.
 
 ## License