From e360ac80be4673cd9045342327fb8cc739fb0b6c Mon Sep 17 00:00:00 2001
From: Vie <125633564+Vieeeeeee@users.noreply.github.com>
Date: Thu, 27 Aug 2026 12:18:16 +0800
Subject: [PATCH] =?UTF-8?q?release:=200.5.1=20=E2=80=94=20concurrent=20com?=
 =?UTF-8?q?mands=20stop=20failing=20on=20Windows?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The only user-visible change since 0.5.0. Every command rebuilds registry.json
after releasing the override lock, so two concurrent `describe` calls raced on
that rename. Windows refuses to rename onto a file another process holds open,
and the command reported failure for a write that had already succeeded — CI
caught it on 2 of 12 runs before it was tracked down.

This release is also the first to cut its own GitHub Release, so the repository
page stops advertising a version three behind the one on npm.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 CHANGELOG.md      | 18 ++++++++++++++++++
 package-lock.json |  4 ++--
 package.json      |  2 +-
 3 files changed, 21 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index dce280e..8a0b047 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,24 @@ All notable changes to SkillHub will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.1] - 2026-08-27
+
+### Fixed
+
+- Running several commands at once no longer fails on Windows. Every command
+  rebuilds `registry.json` after the override lock has been released, so two
+  concurrent `describe` calls raced on that one rename. POSIX swaps the inode
+  and always lands; Windows refuses to rename onto a file another process holds
+  open, and the command then reported failure for a write that had already
+  succeeded. The rename now retries briefly — `overrides.json`, the file holding
+  data that cannot be rebuilt, has had a lock all along.
+
+### Internal
+
+- Publishing to npm now cuts the matching GitHub Release, with the notes taken
+  from this file. Tags for 0.3.0, 0.4.0 and 0.5.0 all shipped without one, so
+  the repository page advertised 0.2.0 as the latest version for three days.
+
 ## [0.5.0] - 2026-08-26
 
 A second adversarial review, this time aimed at the health report itself. The
diff --git a/package-lock.json b/package-lock.json
index 7a12fbe..4b825a8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@wsiwsii/skillhub",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@wsiwsii/skillhub",
-      "version": "0.5.0",
+      "version": "0.5.1",
       "license": "MIT",
       "dependencies": {
         "@hono/node-server": "^1.13.0",
diff --git a/package.json b/package.json
index 9c368ea..b3f4fe3 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@wsiwsii/skillhub",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Local-first, portable manager and health doctor for AI Agent Skills",
   "type": "module",
   "bin": {