Release Orchestrator
The agent runs pre-flight validation, generates changelogs from conventional commits, auto-bumps semantic versions, and scores deployment readiness with a GO/CONDITIONAL/NO-GO decision.
Core Capabilities
- Pre-flight validation — 7 automated checks: branch sync, merge conflicts, dirty tree, secret scanning (AWS/GCP/GitHub/Stripe/JWT), gitignore coverage, conventional commits, dependency lock consistency.
- Version management — auto-detect semver bump (PATCH/MINOR/MAJOR) from commit history across
package.json, pyproject.toml, Cargo.toml, etc.; pre-release tags (--pre alpha|beta|rc).
- Changelog generation — Keep a Changelog markdown grouped by type (Added/Changed/Fixed/Security/Breaking) with hashes and
@author attribution.
- Deployment readiness — weighted score across 7 categories (Tests, Code Quality, Docs, Security, Breaking Changes, Dependencies, Rollback) → GO (80+) / CONDITIONAL (60-79) / NO-GO (<60), with single-category blocker at <40.
- End-to-end pipeline — chain all tools non-interactively; blocks on pre-flight failure, test failure, or NO-GO. CI/CD steps and pre-push git hook provided.
- Release types — hotfix, patch, minor, major, and pre-release flows with branch patterns and bump rules.
When to Use
- Running pre-release validation or gating a release with secret scanning and GO/NO-GO checks.
- Generating a changelog from conventional commits before tagging.
- Auto-bumping a semantic version from commit history.
- Scoring deployment readiness across tests, quality, security, and rollback.
- Wiring release validation into a CI/CD pipeline or pre-push hook.
Clarify First
Before orchestrating the release, confirm these inputs. If any is unknown or vague, ASK — do not assume:
Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.
Tools
| Tool |
Purpose |
Command |
preflight_checker.py |
Run 7 pre-release checks (sync, conflicts, secrets, commits, deps) |
python scripts/preflight_checker.py --repo . --base main --json |
changelog_generator.py |
Generate Keep a Changelog markdown from a ref range |
python scripts/changelog_generator.py --repo . --from v1.2.0 --to HEAD --output CHANGELOG.md |
version_bumper.py |
Auto-detect next semver from commits; write version files |
python scripts/version_bumper.py --repo . --dry-run --json |
release_readiness_scorer.py |
Score readiness 0-100 with GO/CONDITIONAL/NO-GO decision |
python scripts/release_readiness_scorer.py --input release_data.json --json |
All tools support --json for machine output. Exit code 0 = pass, 1 = fail (CI-friendly).
References
Load the reference that matches the task — keep this file lean and pull detail on demand:
- references/release-workflows-and-operations.md — quick-start commands, the three core workflows (pre-flight, version/changelog, readiness) with their checkpoint tables, the end-to-end pipeline script, release-type matrix, CI/CD integration YAML, anti-patterns, and the troubleshooting table. Read when running or chaining any workflow.
- references/release_engineering_guide.md — release strategies (rolling, blue-green, canary) and release engineering practice. Read when choosing a deployment strategy.
- references/rollback_strategies.md — database migration rollbacks, reversible-migration rules, and rollback playbooks. Read when planning the rollback portion of a release.
- references/ci_cd_best_practices.md — pipeline design patterns (stage-gate, fan-out/fan-in) and CI/CD best practices. Read when designing the surrounding pipeline.
Scope & Limitations
This skill covers: pre-flight validation, semantic version bumping, changelog generation, deployment-readiness scoring, and gating releases with GO/NO-GO decisions for git + conventional-commits projects.
This skill does NOT cover: the actual deploy/orchestration execution (handled by senior-devops / devops-workflow-engineer), test authoring (senior-qa), or deep security scanning beyond secret pattern-matching (senior-secops).
Integration Points
| Skill |
Integration |
senior-devops |
Pipeline stages consume pre-flight and readiness JSON as gates |
senior-qa |
Test results feed Tests category (25% weight) |
senior-secops |
Secret scan and CVE counts feed Security category (15%) |
code-reviewer |
Code quality metrics feed Code Quality category (20%) |
devops-workflow-engineer |
Workflow YAML calls tools as pipeline steps |
1---2name: release-orchestrator3description: Orchestrate end-to-end release pipelines. Use when running pre-release validation, generating changelogs, bumping semantic versions, scoring deployment readiness, or gating releases with secret scanning and GO/NO-GO checks.4license: MIT + Commons Clause5---6# Release Orchestrator
7
8The agent runs pre-flight validation, generates changelogs from conventional commits, auto-bumps semantic versions, and scores deployment readiness with a GO/CONDITIONAL/NO-GO decision.
9
10## Core Capabilities
11
12- **Pre-flight validation** — 7 automated checks: branch sync, merge conflicts, dirty tree, secret scanning (AWS/GCP/GitHub/Stripe/JWT), gitignore coverage, conventional commits, dependency lock consistency.
13- **Version management** — auto-detect semver bump (PATCH/MINOR/MAJOR) from commit history across `package.json`, `pyproject.toml`, `Cargo.toml`, etc.; pre-release tags (`--pre alpha|beta|rc`).
14- **Changelog generation** — Keep a Changelog markdown grouped by type (Added/Changed/Fixed/Security/Breaking) with hashes and `@author` attribution.
15- **Deployment readiness** — weighted score across 7 categories (Tests, Code Quality, Docs, Security, Breaking Changes, Dependencies, Rollback) → GO (80+) / CONDITIONAL (60-79) / NO-GO (<60), with single-category blocker at <40.
16- **End-to-end pipeline** — chain all tools non-interactively; blocks on pre-flight failure, test failure, or NO-GO. CI/CD steps and pre-push git hook provided.
17- **Release types** — hotfix, patch, minor, major, and pre-release flows with branch patterns and bump rules.
18
19## When to Use
20
21- Running pre-release validation or gating a release with secret scanning and GO/NO-GO checks.
22- Generating a changelog from conventional commits before tagging.
23- Auto-bumping a semantic version from commit history.
24- Scoring deployment readiness across tests, quality, security, and rollback.
25- Wiring release validation into a CI/CD pipeline or pre-push hook.
26
27## Clarify First
28
29Before orchestrating the release, confirm these inputs. If any is unknown or vague, ASK — do not assume:
30
31- [ ] **Base branch & ref range** — what HEAD is compared against (drives pre-flight branch-sync and the changelog `--from`/`--to`)
32- [ ] **Release type** — hotfix / patch / minor / major / pre-release (sets the branch pattern and bump rule)
33- [ ] **Gate strictness** — block on CONDITIONAL (60-79) or only on NO-GO (<60) (decides whether the pipeline halts)
34
35Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.
36
37## Tools
38
39| Tool | Purpose | Command |
40|------|---------|---------|
41| `preflight_checker.py` | Run 7 pre-release checks (sync, conflicts, secrets, commits, deps) | `python scripts/preflight_checker.py --repo . --base main --json` |
42| `changelog_generator.py` | Generate Keep a Changelog markdown from a ref range | `python scripts/changelog_generator.py --repo . --from v1.2.0 --to HEAD --output CHANGELOG.md` |
43| `version_bumper.py` | Auto-detect next semver from commits; write version files | `python scripts/version_bumper.py --repo . --dry-run --json` |
44| `release_readiness_scorer.py` | Score readiness 0-100 with GO/CONDITIONAL/NO-GO decision | `python scripts/release_readiness_scorer.py --input release_data.json --json` |
45
46All tools support `--json` for machine output. Exit code 0 = pass, 1 = fail (CI-friendly).
47
48## References
49
50Load the reference that matches the task — keep this file lean and pull detail on demand:
51
52- **[references/release-workflows-and-operations.md](references/release-workflows-and-operations.md)** — quick-start commands, the three core workflows (pre-flight, version/changelog, readiness) with their checkpoint tables, the end-to-end pipeline script, release-type matrix, CI/CD integration YAML, anti-patterns, and the troubleshooting table. Read when running or chaining any workflow.
53- **[references/release_engineering_guide.md](references/release_engineering_guide.md)** — release strategies (rolling, blue-green, canary) and release engineering practice. Read when choosing a deployment strategy.
54- **[references/rollback_strategies.md](references/rollback_strategies.md)** — database migration rollbacks, reversible-migration rules, and rollback playbooks. Read when planning the rollback portion of a release.
55- **[references/ci_cd_best_practices.md](references/ci_cd_best_practices.md)** — pipeline design patterns (stage-gate, fan-out/fan-in) and CI/CD best practices. Read when designing the surrounding pipeline.
56
57## Scope & Limitations
58
59**This skill covers:** pre-flight validation, semantic version bumping, changelog generation, deployment-readiness scoring, and gating releases with GO/NO-GO decisions for git + conventional-commits projects.
60
61**This skill does NOT cover:** the actual deploy/orchestration execution (handled by `senior-devops` / `devops-workflow-engineer`), test authoring (`senior-qa`), or deep security scanning beyond secret pattern-matching (`senior-secops`).
62
63## Integration Points
64
65| Skill | Integration |
66|-------|-------------|
67| `senior-devops` | Pipeline stages consume pre-flight and readiness JSON as gates |
68| `senior-qa` | Test results feed Tests category (25% weight) |
69| `senior-secops` | Secret scan and CVE counts feed Security category (15%) |
70| `code-reviewer` | Code quality metrics feed Code Quality category (20%) |
71| `devops-workflow-engineer` | Workflow YAML calls tools as pipeline steps |