From 8d43edd01643642a20f635015b80444586f4e2e8 Mon Sep 17 00:00:00 2001
From: Saulius Menkevicius <saulius.menkevicius@bugcrowd.com>
Date: Wed, 23 Sep 2026 18:28:19 +0300
Subject: [PATCH 1/2] Bump package.json version to 1.0.12

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 1de032ff..9fe37bfa 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "mcode-action",
-  "version": "1.0.10",
+  "version": "1.0.12",
   "private": true,
   "description": "Mayhem for Code action",
   "main": "lib/main.js",

From 8b6c9a34e1885f8a19a6be7b0d25640d32c84f76 Mon Sep 17 00:00:00 2001
From: Saulius Menkevicius <saulius.menkevicius@bugcrowd.com>
Date: Wed, 23 Sep 2026 18:28:29 +0300
Subject: [PATCH 2/2] Add RELEASING.md documenting the release process

Documents the versioning scheme (immutable vX.Y.Z tags plus a floating
v1 major tag) and the step-by-step procedure for cutting a release,
per the existing convention used for v1.0.11/v1.
---
 RELEASING.md | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 RELEASING.md

diff --git a/RELEASING.md b/RELEASING.md
new file mode 100644
index 00000000..6b0c2473
--- /dev/null
+++ b/RELEASING.md
@@ -0,0 +1,26 @@
+# Releasing
+
+Releases use annotated (ideally GPG-signed) git tags following semver:
+
+- `vX.Y.Z` — immutable per-release tag (e.g. `v1.0.12`), never moved once pushed.
+- `v1` — floating major tag that always points at the latest `v1.Y.Z` release.
+  Consumers pin to it (`uses: ForAllSecure/mcode-action@v1`), so moving it
+  after each release lets them pick up updates automatically.
+
+> `v1-dev` is a stale, unrelated legacy tag — ignore it during releases.
+
+## Steps
+
+1. Merge a PR bumping `version` in `package.json` to the new release version.
+2. On the merge commit, tag and push the release:
+   ```bash
+   git tag -a v1.0.12 -m "Release v1.0.12" -s
+   git push origin v1.0.12
+   ```
+3. Move the floating major tag to the same commit and force-push:
+   ```bash
+   git tag -fa v1 -m "Update v1 tag to v1.0.12" -s
+   git push origin v1 --force
+   ```
+4. Verify `git rev-list -n 1 v1` matches `git rev-list -n 1 v1.0.12`.
+5. Optionally publish a GitHub Release for the new tag.