A release publishes a vX.Y.Z git tag, a GitHub release with a chronicle-generated changelog, and the committed dist/index.cjs. Aim for a 1–2 week cadence.
From a clean checkout of main:
make releasemake update-syft-release repins src/SyftVersion.ts and rebuilds dist/ — review the diff and open a PR. Requires gh auth.