Converts the /release Claude Code command into an agent skill at
.agents/skills/release/SKILL.md (symlinked at .claude/skills/release),
covering milestone readiness, GitHub release creation, downstream PR
monitoring, and published-artifact verification. Documents how to run
it for Claude Code, GitHub Copilot, and Codex CLI in CONTRIBUTING.md
and AGENTS.md, and fixes a .gitignore collision with the VS build-output
[Rr]elease/ rule that was hiding the new skill directory.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

mislav/bump-homebrew-formula-action fails with "unexpected HTTP 303
response" because GitHub's tarball endpoint now returns 303 instead of
302 and the action only handles 302 (mislav/bump-homebrew-formula-action#342).

Switch to Homebrew's own `brew bump-formula-pr` CLI, preinstalled on the
runner, which follows the redirect correctly. This also removes a
third-party pinned-action dependency. Behaviour is preserved: same source
tarball URL, computed SHA-256, PR forked via gittools-bot, and the
GitTools Bot committer identity used by previous release PRs.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

ci: replace homebrew bump action with brew bump-formula-pr

Homebrew now publishes via `brew bump-formula-pr` and GitTools Actions
opens a PR instead of pushing directly to main. Update Phase 5/7 of the
release skill so all three downstream targets (Homebrew, winget, GitTools
Actions) are verified as PRs, and flag a direct commit to GitTools/actions
main as unexpected.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Bumps devcontainers/dotnet from `da953a3` to `be5bd89`.

---
updated-dependencies:
- dependency-name: devcontainers/dotnet
  dependency-version: be5bd898d964c0d081cb22285c2318e488882103702c8831418fdd59218fd5dd
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

…iner/devcontainers/dotnet-be5bd898d964c0d081cb22285c2318e488882103702c8831418fdd59218fd5dd

build(deps): bump devcontainers/dotnet from `da953a3` to `be5bd89` in /.devcontainer

Ports repo-agnostic milestone/release-notes hygiene improvements from the
GitTools/actions release skill:

- Paginate all milestone listings (--paginate / --slurp) so milestones with
  >100 items no longer truncate to the first page
- Add 3c-bis: require at least one closed issue (GRM degenerates on PR-only
  milestones)
- Add 3d-bis: detect an in-milestone PR that closes an in-milestone issue
  (double-count) via cross-repo-safe GraphQL closingIssuesReferences
- Add a compact one-pass jq label offender scan to 3c
- Harden Phase 0 with a github.com hostname auth check
- Link releases to an Announcements discussion and verify it in Phase 6/7

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

In GitLab MR pipelines, CI_COMMIT_REF_NAME is the source branch name,
not the merge request ref. Resolve the current branch with precedence:
CI_COMMIT_TAG → CI_MERGE_REQUEST_REF_PATH → CI_COMMIT_REF_NAME.

Keeps GitLab CI logic in GitVersion.BuildAgents only (no Core changes),
following the same pass-through pattern as Azure Pipelines and GitHub Actions.

Add unit and integration tests for the MR workflow and document the
required pull-request regex for GitLab's merge-requests/ namespace.

…-request

feat(buildagents): read CI_MERGE_REQUEST_REF_PATH in GitLabCi

fix: sanitize labels correctly when using enviornment variables

…ature updates (#5015)

* chore(deps): merge docker configs, add devcontainers ecosystem, group actions

- Merge the two docker ecosystem entries into one via directories list
- Add devcontainers ecosystem to update features in devcontainer.json
- Group additional github-actions vendors (docker, codeql, reviewdog, gittools)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* chore(devcontainer): add lock file so Dependabot can track features

Unpin feature tags and add devcontainer-lock.json with resolved
versions and digests, required for the devcontainers Dependabot ecosystem.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

…#5016)

Bumps the codeql group with 3 updates in the /.github/workflows directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@8aad20d...54f647b)

Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@8aad20d...54f647b)

Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.36.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@8aad20d...54f647b)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps Microsoft.CodeAnalysis.Analyzers from 5.3.0 to 5.6.0
Bumps Microsoft.CodeAnalysis.CSharp from 5.3.0 to 5.6.0
Bumps Microsoft.CodeAnalysis.PublicApiAnalyzers from 5.0.0-1.25277.114 to 5.6.0

---
updated-dependencies:
- dependency-name: Microsoft.CodeAnalysis.Analyzers
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.CodeAnalysis.PublicApiAnalyzers
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>

…d version property

Dependabot's partial bump of Microsoft.CodeAnalysis.CSharp to 5.6.0 left
Microsoft.CodeAnalysis.Common/VisualBasic (src) and
Microsoft.CodeAnalysis.CSharp.Workspaces (new-cli) pinned at 5.3.0,
causing NU1605 downgrade errors during restore. Introduce a single
MicrosoftCodeAnalysisVersion MSBuild property so these tightly-coupled
packages always move together, and fix the dependabot.yml group
ordering so the CodeAnalysis-specific group isn't shadowed by the
broader Microsoft.* group.

…soft-1c1da6d8a1

(deps): Bump the microsoft group with 3 updates