diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
new file mode 100644
index 0000000..111e867
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -0,0 +1,47 @@
+name: Bug report
+description: Report a reproducible problem in a Flutter Forge package or tool.
+title: 'fix: '
+body:
+ - type: input
+ id: package
+ attributes:
+ label: Package and version
+ placeholder: 'nonstop_cli 0.0.8+2'
+ validations:
+ required: true
+ - type: textarea
+ id: environment
+ attributes:
+ label: Environment
+ description: Include Flutter/Dart versions, operating system and affected platforms.
+ validations:
+ required: true
+ - type: textarea
+ id: reproduction
+ attributes:
+ label: Steps and minimal reproduction
+ description: Provide steps and a minimal code example or public reproduction repository. Remove credentials and private data.
+ validations:
+ required: true
+ - type: textarea
+ id: expected
+ attributes:
+ label: Expected behavior
+ validations:
+ required: true
+ - type: textarea
+ id: actual
+ attributes:
+ label: Actual behavior and logs
+ description: Include the complete relevant error or stack trace, with secrets removed.
+ validations:
+ required: true
+ - type: checkboxes
+ id: checks
+ attributes:
+ label: Before submitting
+ options:
+ - label: I searched existing issues for this problem.
+ required: true
+ - label: This is not a security vulnerability (see SECURITY.md for private reporting).
+ required: true
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
new file mode 100644
index 0000000..7be77ce
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -0,0 +1,8 @@
+blank_issues_enabled: true
+contact_links:
+ - name: Report a security vulnerability privately
+ url: https://github.com/nonstopio/flutter_forge/blob/main/SECURITY.md
+ about: Follow the private reporting instructions; do not open a public vulnerability issue.
+ - name: Release setup and troubleshooting
+ url: https://github.com/nonstopio/flutter_forge/blob/main/docs/RELEASING.md
+ about: Authentication, release commands, and recovering a failed publication.
diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
new file mode 100644
index 0000000..1f4879c
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature_request.yml
@@ -0,0 +1,29 @@
+name: Feature request
+description: Suggest an improvement to a package, plugin or development tool.
+title: 'feat: '
+body:
+ - type: input
+ id: package
+ attributes:
+ label: Affected package or tool
+ validations:
+ required: true
+ - type: textarea
+ id: problem
+ attributes:
+ label: What problem would this solve?
+ description: Describe the use case and the current limitation.
+ validations:
+ required: true
+ - type: textarea
+ id: proposal
+ attributes:
+ label: Proposed behavior
+ description: Include a small API or usage example if useful.
+ validations:
+ required: true
+ - type: textarea
+ id: alternatives
+ attributes:
+ label: Alternatives and compatibility
+ description: Mention workarounds, alternatives, and any expected breaking changes.
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
new file mode 100644
index 0000000..7059415
--- /dev/null
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -0,0 +1,20 @@
+## What changes?
+
+Describe the problem and resulting behavior. Link the related issue (for example, `Fixes #123`).
+
+## Validation
+
+List the commands you ran and their results. For UI changes, include screenshots.
+
+## Compatibility
+
+List affected packages, breaking changes and migration steps, or write “None”.
+
+## Checklist
+
+- [ ] The PR title follows Conventional Commits, for example `fix(ns_utils): handle empty input`.
+- [ ] Relevant analysis and tests pass; behavior changes have appropriate tests.
+- [ ] Documentation/examples are updated where needed.
+- [ ] Package versions and changelogs are left to Melos.
+- [ ] New public packages include a README, LICENSE, tests and release setup from `docs/RELEASING.md`.
+- [ ] No credentials, private data or generated build output are included.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..87c0249
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,12 @@
+version: 2
+updates:
+ - package-ecosystem: github-actions
+ directory: /
+ schedule:
+ interval: monthly
+ open-pull-requests-limit: 5
+ commit-message:
+ prefix: chore
+ groups:
+ github-actions:
+ patterns: ['*']
diff --git a/.github/scripts/release-failure.mjs b/.github/scripts/release-failure.mjs
new file mode 100644
index 0000000..4eb6c94
--- /dev/null
+++ b/.github/scripts/release-failure.mjs
@@ -0,0 +1,62 @@
+const failures = new Set(['failure', 'timed_out', 'cancelled', 'action_required', 'startup_failure']);
+
+export function diagnostic(text) {
+ return String(text)
+ .replace(/\x1b\[[0-9;]*m/g, '')
+ .replace(/(?:gh[pousr]_[A-Za-z0-9_]+|github_pat_[A-Za-z0-9_]+|eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+)/g, '[REDACTED]')
+ .replace(/(authorization\s*[:=]\s*(?:bearer|basic)\s+)\S+/gi, '$1[REDACTED]')
+ .replace(/(https?:\/\/)[^\s/@]+:[^\s/@]+@/g, '$1[REDACTED]@')
+ .replace(/`/g, "'")
+ .replace(/@/g, '@\u200b')
+ .slice(-7000);
+}
+
+export async function reportFailure({ github, context, core }) {
+ const run = context.payload.workflow_run;
+ if (!failures.has(run.conclusion)) return;
+ const repo = context.repo;
+ const marker = ``;
+ const body = [marker, `## ${run.name} failed`, '',
+ `- Run: [${run.id}, attempt ${run.run_attempt}](${run.html_url})`,
+ `- Commit: \`${run.head_sha}\``, `- Ref: \`${diagnostic(run.head_branch)}\``,
+ `- Result: **${run.conclusion}**`, '', '### Failure details', ''];
+ try {
+ const jobs = await github.paginate(github.rest.actions.listJobsForWorkflowRunAttempt, {
+ ...repo, run_id: run.id, attempt_number: run.run_attempt, per_page: 100,
+ });
+ const failed = jobs.filter((job) => failures.has(job.conclusion));
+ if (!failed.length) body.push('No failed job details are available. The run may have failed during startup; see the run link for GitHub’s diagnostic.');
+ for (const job of failed) {
+ body.push(`#### [${diagnostic(job.name)}](${job.html_url}) — ${job.conclusion}`);
+ for (const step of job.steps || []) if (failures.has(step.conclusion)) body.push(`- Step ${step.number}: **${diagnostic(step.name)}** (${step.conclusion})`);
+ try {
+ const checkId = Number(job.check_run_url?.split('/').at(-1));
+ if (checkId) {
+ const annotations = await github.paginate(github.rest.checks.listAnnotations, { ...repo, check_run_id: checkId, per_page: 100 });
+ for (const annotation of annotations.filter((item) => item.annotation_level === 'failure').slice(0, 5)) {
+ body.push(`\n\`\`\`text\n${diagnostic(annotation.message)}\n\`\`\``);
+ }
+ }
+ const logs = await github.rest.actions.downloadJobLogsForWorkflowRun({ ...repo, job_id: job.id });
+ const text = typeof logs.data === 'string' ? logs.data : Buffer.from(logs.data).toString('utf8');
+ body.push(`\nJob log tail (GitHub-masked)
\n\n\`\`\`text\n${diagnostic(text.split('\n').slice(-45).join('\n'))}\n\`\`\`\n