release-management

The fragment is a release automation workflow, not evident malware. It performs legitimate but high-impact Git and GitHub operations, including pushing tags and publishing releases. The sourced release script is an unreviewed execution boundary, and the version argument and checklist are insufficiently validated. It should only be run with explicit authorization after reviewing repository state and the contents of scripts/release-scripts.sh.