fix(release): align with skillflag release pattern + fix skillflag import

- release-it v17 → v19 (fixes Octokit null log crash)
- in-memory version bump: fetch latest from npm, bump in CI working
  dir only, never commit to main (branch-protection compatible)
- fix skillflag import: 'skillflag/dist/index.js' → 'skillflag'
- bump skillflag dep to 0.1.3 (has proper package exports)

Author: dutifulbob

.github/workflows/release.yaml

@@ -32,6 +32,21 @@ jobs:
       - run: git config user.email "github-actions[bot]@users.noreply.github.com"
       - run: npm ci
       - run: npm run lint
-      - run: npm run release:ci -- --increment ${{ inputs.increment }}
+      # Fetch latest version from npm, bump it, write to package.json.
+      # Nothing is committed — the bumped version lives only in the CI
+      # runner's working directory. release-it tags + publishes from it.
+      - name: Bump version from npm registry
+        run: |
+          LATEST=$(npm view @simpledoc/simpledoc version 2>/dev/null || echo "0.0.0")
+          echo "Latest on npm: $LATEST"
+          npm version --no-git-tag-version "$LATEST" --allow-same-version
+          npm version --no-git-tag-version ${{ inputs.increment }}
+          VERSION=$(node -p 'require("./package.json").version')
+          echo "Releasing: $VERSION"
+      - name: Release
+        run: |
+          VERSION=$(node -p 'require("./package.json").version')
+          npm run release:ci -- --increment "$VERSION"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_CONFIG_PROVENANCE: "true"

.release-it.json

@@ -1,14 +1,19 @@
 {
   "git": {
-    "requireCleanWorkingDir": true,
+    "requireCleanWorkingDir": false,
     "requireBranch": "main",
-    "commitMessage": "chore(release): ${version}",
+    "commit": false,
+    "tag": true,
     "tagName": "v${version}",
-    "push": true
+    "push": true,
+    "pushArgs": ["--tags"]
   },
   "npm": {
+    "allowSameVersion": true,
+    "version": false,
     "publish": true,
-    "skipChecks": true
+    "skipChecks": true,
+    "publishArgs": ["--provenance"]
   },
   "github": {
     "release": true,

package-lock.json

@@ -51,7 +51,7 @@
   "dependencies": {
     "@clack/prompts": "^0.11.0",
     "commander": "^11.0.0",
-    "skillflag": "^0.1.1"
+    "skillflag": "^0.1.3"
   },
   "devDependencies": {
     "@eslint/js": "^9.0.0",

package.json

@@ -1 +1 @@
-export { handleSkillflag } from "skillflag/dist/index.js";
+export { handleSkillflag } from "skillflag";