S3.6 — Release 0.8.0

Intent

Cut 0.8.0 "Toolchain refresh" on all three registries through the new tokenless publishing paths. Release-please PR #32 (0.7.1, Cargo.toml URL fix) is superseded and folded in.

Acceptance criteria

• Release-please PR proposes v0.8.0 (breaking commits footered)
• Published: crates.io (oxmpl, oxmpl-py, oxmpl-js), PyPI (oxmpl-py: cp311–cp314, cp314t, pp311 wheels + sdist), npm (oxmpl-js) — no stored tokens used
• GitHub release notes present, with migration notes
• Installable: pip install oxmpl-py==0.8.0, npm view oxmpl-js@0.8.0, crates.io 0.8.0
• Post-release: main's workflows green

Tasks

• Owner: register PyPI trusted publisher for oxmpl-py (exact workflow file + job name)
• Owner: register crates.io trusted publishers for oxmpl, oxmpl-py, oxmpl-js
• Manually trigger the release workflows once before tagging (no publish)
• Merge release-please PR, confirm 0.8.0
• Watch CI through publish (fallback: maturin upload / cargo publish --token)
• Verify installs
• Record release friction in the sprint page

Source

Agreed in the senior-engineer grilling session 2026-10-08 (decisions in repo docs/planning/adr/0003-motion-validation.md, glossary in CONTEXT.md; toolchain research briefs in the same session).