From 9dabde5f96259abb136068482ba22854d7788d15 Mon Sep 17 00:00:00 2001 From: Michael Gasperini Date: Sun, 1 Nov 2026 01:37:19 +0100 Subject: [PATCH] docs: align release flow with trusted publishing --- AGENTS.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/AGENTS.md b/AGENTS.md index f564195..7cb3e61 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -164,8 +164,8 @@ For an authorized release: `validate (ubuntu-latest)` checks. Do not bypass those rules. 7. After the pull request is merged, create an annotated `vX.Y.Z` tag on the merged commit and push it. -8. Create the GitHub Release with the VSIX attached, then verify the remote asset - digest and all CI/CodeQL checks. +8. The tag push runs the Release workflow, which creates the GitHub Release with + the VSIX attached. Verify the remote asset digest and all CI/CodeQL checks. Visual Studio Marketplace and Open VSX publication is performed by the repository owner. After the GitHub Release exists, dispatch the Release workflow with that