linear-release-setup

name: linear-release-setup description: Generate CI/CD configuration for Linear Release. Use when setting up release tracking, configuring CI pipelines for Linear, or integrating deployments with Linear releases. Supports GitHub Actions, GitLab CI, CircleCI, and other platforms.

Linear Release Setup

The linear-release README is the source of truth for commands, flags, installation, environment variables, path filtering, and troubleshooting. Fetch it before generating any config — this skill focuses on the interactive setup workflow and the pipeline modeling decisions the README cannot make for the user.

Interactive Workflow

Step 1: Preflight

Before generating config, confirm:

1. Pipeline exists in Linear — the user must have created a release pipeline in Linear first (Settings → Releases). Each pipeline has its own access key.
2. Detect CI platform — look for .github/workflows/*.yml (GitHub Actions), .gitlab-ci.yml (GitLab CI), .circleci/config.yml (CircleCI), or other CI config.
3. Detect default branch — check git symbolic-ref refs/remotes/origin/HEAD or the CI config. Don't assume main.

Step 2: Map pipelines, then ask

Start by listing every build the user ships independently — each becomes its own Linear pipeline. Pipeline-vs-stage confusion is the single most common setup mistake, so whenever a split isn't obvious, apply the test in "Stages vs Pipelines" below.

Ask, in order:

1. CI platform — if not auto-detected.

2. What do you ship, and to whom? Prompt explicitly about common split candidates: production vs. beta or TestFlight, nightly or dogfood builds, staging, per-platform builds (iOS, Android, web), per-service in a monorepo. For each candidate, apply the test: can these hold different commits at the same time? Yes → separate pipelines. No (same immutable build moving through gates) → one pipeline with stages.

3. For each pipeline: continuous or scheduled?

   • Continuous — every deploy completes a release. Typical for nightlies, dogfood, and web apps that ship on merge.
   • Scheduled — releases collect changes over time and move through stages before shipping. Typical for versioned mobile and on-prem.

   The test: does the team need to track a release before it ships — naming it, seeing what's queued in it, or moving it through phases (code freeze, QA, etc.)?

   • Yes → scheduled (the release exists as an in-progress thing before it ships).
   • No → continuous (the release is created at the moment of shipping).

4. For each scheduled pipeline, ask explicitly:

   • Branch model — just main, or main + release branches (release/*)?
   • Version source — calendar (2026.05), semver (1.2.0), or commit SHA? Derived from branch name, CI variable, file, or git tag?
   • Stages — what phases does a release move through before completion (e.g. "code freeze", "in qa")? Stages are gates on one build, not separate pipelines.
   • Automation — all manual via workflow_dispatch, or automated (e.g. cutting a release branch auto-promotes it)?

5. Monorepo paths — if multiple pipelines share one repo, note which paths belong to each and wire up path filters in Linear pipeline settings or via --include-paths.

Step 3: Generate the CI configuration

Fetch the README first for the current commands, flags, install snippet, and command-targeting rules. For GitHub Actions, prefer the official action (linear/linear-release-action@v0); for other platforms, use the CLI binary per the README's Installation section.

Runtime requirements (Docker-based CI)

The image running the linear-release job must provide:

• glibc. The prebuilt binary is dynamically linked against glibc and will not run on Alpine/musl images. Pick a Debian/Ubuntu base (debian:bookworm-slim, ubuntu:24.04, buildpack-deps:bookworm). Avoid alpine, any *-alpine tag, and curlimages/curl — on musl, the binary fails with an opaque "not found" error because the glibc dynamic loader is absent.
• git. Slim images do not include it. Install it explicitly: apt-get update && apt-get install -y git.
• curl (or wget). Needed to download the CLI binary.

GitLab CI: check existing variables

If .gitlab-ci.yml already exists, inspect any default variables: block. The linear-release job needs a full clone, so override at the job level when project defaults would prevent that:

• GIT_STRATEGY: clone — required if the project default is none or empty (both skip cloning entirely).
• GIT_DEPTH: 0 — set this on the linear-release job regardless. New GitLab projects default to a shallow clone of depth 20, and projects often lower it further.

Pick the matching example template, adapt it (branch patterns, stage names, paths, version format), and add it to an existing workflow or create a new one. Multiple pipelines mean multiple workflows or jobs, each calling the CLI with its own access key — one secret per pipeline (e.g. LINEAR_ACCESS_KEY_IOS, LINEAR_ACCESS_KEY_WEB).

Each scheduled example includes a monorepo note in the header explaining how to split workflows for path filtering per platform.

Step 4: Remind about secrets

Tell the user to add the LINEAR_ACCESS_KEY secret to their CI environment:

• GitHub Actions: Repository Settings → Secrets and variables → Actions → New repository secret
• GitLab CI: Settings → CI/CD → Variables
• CircleCI: Project Settings → Environment Variables

The access key is created in Linear from the pipeline's settings page. Each pipeline has its own access key.

Key Concepts

A Linear release pipeline is one independent stream of releases, with its own version history, current release, and access key. This is not a CI pipeline; it is the unit Linear uses to track releases, and your CI config calls the CLI to update it. Different products, environments, or distribution channels that ship independently are different pipelines.

Pipelines come in two types — continuous and scheduled. See the README's Pipeline Types section for the canonical description of each.

Stages vs Pipelines

A pipeline is one stream of releases. A stage is one phase inside a release on that pipeline. Confusing the two is the single most common setup mistake — work through the test below before writing any config.

The test: can two things be in-flight at the same time, holding different commits?

• Yes → separate pipelines. TestFlight running on HEAD while production ships 1.2 from a release branch. Web staging auto-deploying from main while prod lags behind. A hotfix landing in one stream but not the other.
• No, it's the same build moving through gates → one pipeline with stages. A release is cut at 1.2, goes through code freeze, QA, and RC soak, then ships. The build never changes; only the phase does.

Stages are process gates: "code freeze", "in qa", "in review", "rc soak". They only exist on scheduled pipelines.

Ambiguous cases — apply the test:

• Beta / TestFlight. TestFlight soak before GA on the same build → stage on the production pipeline. A separate nightly or dogfood channel shipping distinct builds → its own pipeline.
• Staging. Staging that auto-deploys from main (or runs hotfixes prod doesn't have) → separate pipeline. Staging that holds the exact same build as prod, just earlier in the promotion path → stage.
• Per-service monorepo. Each service that ships independently → its own pipeline, scoped by path filters. Unambiguous; services are never stages.

Stages can also be frozen in Linear. A frozen stage makes sync (without --release-version) skip that release and land commits on the next one — a safety net for code freezes. This is a process tool, not a way to squeeze two pipelines into one.

Reference

Everything about commands, flags, environment variables, command targeting, path filtering, JSON output, and troubleshooting lives in the linear-release README. For GitHub Action inputs and how they map to CLI flags, see the action README. Always fetch these rather than relying on memory — they move ahead of this skill.

Checklist

• Full clone / fetch-depth: 0 (GitLab: GIT_DEPTH: 0, and GIT_STRATEGY not none)
• LINEAR_ACCESS_KEY set as a secret (one per pipeline)
• Correct binary platform (linux-x64, darwin-arm64, or darwin-x64)
• Docker-based CI: glibc base image (no Alpine/musl) with git and curl available
• Triggers on the correct branches (main for continuous; main + release/* for scheduled)
• Monorepo: path filters set (in Linear config or via --include-paths), and separate workflows if using release branches