# Release Clockwork

> Build and verify a signed, notarized, auto-updating Clockwork release.

- Skill: `iannuttall/release-clockwork` (Agent Skill)
- Install (CLI): `npx skillmds@latest add iannuttall/release-clockwork`
- Raw SKILL.md: https://api.skillmd.com/api/skills/iannuttall/release-clockwork/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: iannuttall (https://skillmd.com/u/iannuttall)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/iannuttall/release-clockwork

---


# Release Clockwork

## Preflight

1. Move user-facing changes into a dated `## X.Y.Z - YYYY-MM-DD` section in `CHANGELOG.md`.
2. Set the matching `MARKETING_VERSION` and a strictly increasing `BUILD_NUMBER` in `version.env`.
3. Confirm `Resources/AppIcon.icon` contains the final artwork.
4. Confirm the Developer ID identity, `notarytool` profile, and Sparkle keychain key described in `docs/releasing.md` are available.
5. Run `make check` and commit the clean release state.

## Build

Run `make release`. Do not run individual signing or notarization commands by hand.

The command creates:

- `.build/artifacts/Clockwork-X.Y.Z.dmg`
- `.build/artifacts/Clockwork-X.Y.Z.dmg.sha256`

## Publish

Upload both files to a draft GitHub release tagged `vX.Y.Z`, then run:

```sh
make appcast ARTIFACT=.build/artifacts/Clockwork-X.Y.Z.dmg
```

Review and commit `appcast.xml`, then publish the draft release. Verify the GitHub download, checksum, appcast signature, and an update from the previous installed build. Never commit private keys or ship an unnotarized artifact.