fix: add missing CHANGELOG entries and improve release workflow

- Add missing v1.1.0 and v1.2.0 entries to CHANGELOG
- Release workflow verifies CHANGELOG entry exists before releasing
- Rollback tag automatically if verification fails
- Simplify /release skill to only push tag (workflow handles the rest)

Author: robbertbos

.claude/skills/release.md

@@ -1,15 +1,11 @@
 # /release <version>
 
-1. Verify CHANGELOG.md has entry for version
-2. Extract release notes from CHANGELOG.md (section for this version)
-3. Create and push tags:
+1. Verify CHANGELOG.md has entry for version (`## [<version>]`)
+2. Extract release notes from CHANGELOG for this version
+3. Create and push version tag with release notes as message:
 ```bash
-git tag -a v<version> -m "Release v<version>"
+git tag -a v<version> -m "<release notes from changelog>"
 git push origin v<version>
-git tag -fa v<major> -m "Update v<major> to v<version>"
-git push origin v<major> --force
-```
-4. Create release with notes from changelog:
-```bash
-gh release create v<version> --title "v<version>" --notes "<notes from changelog>"
 ```
+
+The release workflow handles the rest. We follow [Semantic Versioning](https://semver.org/).

.github/workflows/release.yml

@@ -19,9 +19,23 @@ jobs:
         id: version
         run: |
           TAG=${GITHUB_REF#refs/tags/}
+          VERSION=${TAG#v}
           MAJOR=$(echo "$TAG" | cut -d. -f1)
-          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
-          echo "major=$MAJOR" >> "$GITHUB_OUTPUT"
+          {
+            echo "tag=$TAG"
+            echo "version=$VERSION"
+            echo "major=$MAJOR"
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Verify CHANGELOG entry exists
+        run: |
+          VERSION=${{ steps.version.outputs.version }}
+          if ! grep -q "## \[$VERSION\]" CHANGELOG.md; then
+            echo "::error::No CHANGELOG entry found for version $VERSION"
+            echo "::error::Please add a '## [$VERSION]' section to CHANGELOG.md before releasing"
+            exit 1
+          fi
+          echo "Found CHANGELOG entry for version $VERSION"
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
@@ -47,3 +61,11 @@ jobs:
           git push origin "$MAJOR"
 
           echo "Updated $MAJOR tag to point to ${{ steps.version.outputs.tag }}"
+
+      - name: Rollback tag on failure
+        if: failure()
+        run: |
+          TAG=${{ steps.version.outputs.tag }}
+          echo "::warning::Rolling back tag $TAG due to workflow failure"
+          git push origin ":refs/tags/$TAG" 2>/dev/null || true
+          echo "Tag $TAG has been removed. Fix the issue and push the tag again."

CHANGELOG.md

@@ -12,30 +12,38 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `.github/dependabot.yml` for automated GitHub Actions updates
 - `.gitignore` for local settings and Claude plans
 - `.claude/` configuration for AI assistant (coding rules, skills, workflow)
-- **deploy** action: PR commenting feature
-  - Automatically post/update a comment on PRs with the deployment URL
-  - New inputs: `comment-on-pr`, `github-token`, `comment-header`
-  - Upsert behavior: updates existing comment instead of creating duplicates
+
+### Changed
+- `.pre-commit-config.yaml`: require minimum version 4.5.0
+- `CONTRIBUTING.md`: simplify setup with `uv` instead of `pip`
+- `release.yml`: verify CHANGELOG entry exists, rollback tag on failure
+
+## [1.2.0] - 2026-01-22
+
+### Added
 - **cleanup** action: PR comment update feature
   - Update the deploy PR comment to show cleanup status when PR is closed
   - New inputs: `update-pr-comment`, `comment-header`
   - New output: `pr-comment-updated`
-  - Changes comment header from "🚀 Preview Deployment" to "🧹 Preview Deployment (Cleaned Up)"
+
+## [1.1.0] - 2026-01-22
+
+### Added
+- **deploy** action: PR commenting feature
+  - Automatically post/update a comment on PRs with the deployment URL
+  - New inputs: `comment-on-pr`, `github-token`, `comment-header`
+  - Upsert behavior: updates existing comment instead of creating duplicates
 - CI/CD pipeline with ShellCheck, actionlint, and yamllint
 - Branch protection and governance files (CODEOWNERS, issue templates, PR template)
 - CONTRIBUTING.md with development guidelines
 - SECURITY.md with security policy
 - Pre-commit hooks configuration
 
-### Changed
-- `.pre-commit-config.yaml`: require minimum version 4.5.0
-- `CONTRIBUTING.md`: simplify setup with `uv` instead of `pip`
-
 ### Fixed
 - ShellCheck warnings: properly quoted GITHUB_OUTPUT
 - Actionlint configuration to only lint workflow files
 
-## [1.0.0] - 2024-01-01
+## [1.0.0] - 2026-01-22
 
 ### Added
 - Initial release of ZAD Actions
@@ -58,5 +66,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Secure handling of API keys via environment variables
 - Dangerous character detection for container inputs
 
-[Unreleased]: https://github.com/RijksICTGilde/zad-actions/compare/v1.0.0...HEAD
+[1.2.0]: https://github.com/RijksICTGilde/zad-actions/releases/tag/v1.2.0
+[1.1.0]: https://github.com/RijksICTGilde/zad-actions/releases/tag/v1.1.0
 [1.0.0]: https://github.com/RijksICTGilde/zad-actions/releases/tag/v1.0.0