chore(release): v0.19.8 + fix auto-tag.yml to work with branch protection

Version bump: 0.19.7 → 0.19.8
- Bumps VERSION/VERSIONS, Package.swift, all 4 Flutter pubspec.yaml
  (incl. runanywhere_genie which was previously skipped), all Kotlin
  gradle.properties, all Web/RN package.json files.

auto-tag.yml fix:
- Previous version tried to push a version-bump commit directly to main,
  which the branch protection rule "changes must be made through a pull
  request" blocks. The workflow failed on every release label.
- New flow: the release PR itself must contain the version bump (run
  sync-versions.sh locally → commit → open PR → merge with release label).
  The workflow verifies the bump is present and only pushes the tag,
  which is not subject to the PR rule.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: sanchitmonga22

.github/workflows/auto-tag.yml

@@ -124,22 +124,34 @@ jobs:
           git config user.name  "github-actions[bot]"
           git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
 
-      - name: Commit version bump + push tag
+      - name: Verify release PR contained version bump
         if: steps.label.outputs.should-release == 'true'
         env:
           NEW_VERSION: ${{ steps.version.outputs.new-version }}
-          BUMP: ${{ steps.label.outputs.bump }}
-          PR_NUMBER: ${{ github.event.pull_request.number }}
         run: |
           set -euo pipefail
+          # Main's branch protection requires all changes via PR — the workflow
+          # cannot push a version-bump commit. The release PR MUST already
+          # contain the sync-versions.sh output (run it locally before opening
+          # the PR). sync-versions.sh is re-run above as a sanity check; if it
+          # produced diff, the PR was missing the bump.
           git add -u
-          if git diff --cached --quiet; then
-            echo "No manifest changes from sync-versions.sh — unexpected; aborting"
+          if ! git diff --cached --quiet; then
+            echo "::error::PR merged with release:${{ steps.label.outputs.bump }} label but VERSIONS/manifests are out of sync with tag v${NEW_VERSION}."
+            echo "::error::Before opening a release PR, run: scripts/sync-versions.sh ${NEW_VERSION}  →  commit  →  open PR  →  merge with release label."
+            git diff --cached
             exit 1
           fi
-          git commit -m "chore: release v${NEW_VERSION} (${BUMP} bump from PR #${PR_NUMBER})"
+          echo "::notice::Manifests already bumped to v${NEW_VERSION} in the release PR."
+
+      - name: Push tag to trigger release.yml
+        if: steps.label.outputs.should-release == 'true'
+        env:
+          NEW_VERSION: ${{ steps.version.outputs.new-version }}
+        run: |
+          set -euo pipefail
+          # Tags are not subject to branch protection, so the workflow token can push them.
           git tag "v${NEW_VERSION}"
-          git push origin main
           git push origin "v${NEW_VERSION}"
           echo "::notice::Pushed tag v${NEW_VERSION} — release.yml will now build and create a draft release"
 

Package.swift

@@ -44,7 +44,7 @@ let useLocalNatives = false //  Toggle: true for local dev, false for release
 
 // Version for remote XCFrameworks (used when useLocalNatives = false)
 // Updated automatically by CI/CD during releases
-let sdkVersion = "0.19.7"
+let sdkVersion = "0.19.8"
 
 // MetalRT remote binary availability flag.
 // Set to `false` until a real checksum for RABackendMetalRT-v<sdkVersion>.zip

sdk/runanywhere-commons/VERSION

@@ -1 +1 @@
-0.19.7
+0.19.8

sdk/runanywhere-commons/VERSIONS

@@ -14,7 +14,7 @@
 # =============================================================================
 
 # Project version (read from VERSION file, but also defined here for scripts)
-PROJECT_VERSION=0.19.7
+PROJECT_VERSION=0.19.8
 
 # =============================================================================
 # Platform Deployment Targets

sdk/runanywhere-flutter/packages/runanywhere/pubspec.yaml

@@ -1,6 +1,6 @@
 name: runanywhere
 description: Privacy-first, on-device AI SDK for Flutter. Run LLMs, STT, TTS, and VAD directly on device with no data leaving the device.
-version: 0.19.7
+version: 0.19.8
 homepage: https://runanywhere.ai
 repository: https://github.com/RunanywhereAI/runanywhere-sdks
 issue_tracker: https://github.com/RunanywhereAI/runanywhere-sdks/issues

sdk/runanywhere-flutter/packages/runanywhere_genie/pubspec.yaml

@@ -1,6 +1,6 @@
 name: runanywhere_genie
 description: Qualcomm Genie NPU backend for RunAnywhere Flutter SDK. On-device LLM inference on Snapdragon NPU.
-version: 0.16.0
+version: 0.19.8
 homepage: https://runanywhere.ai
 repository: https://github.com/RunanywhereAI/runanywhere-sdks
 issue_tracker: https://github.com/RunanywhereAI/runanywhere-sdks/issues

sdk/runanywhere-flutter/packages/runanywhere_llamacpp/pubspec.yaml

@@ -1,6 +1,6 @@
 name: runanywhere_llamacpp
 description: LlamaCpp backend for RunAnywhere Flutter SDK. High-performance on-device LLM text generation with GGUF model support.
-version: 0.19.7
+version: 0.19.8
 homepage: https://runanywhere.ai
 repository: https://github.com/RunanywhereAI/runanywhere-sdks
 issue_tracker: https://github.com/RunanywhereAI/runanywhere-sdks/issues

sdk/runanywhere-flutter/packages/runanywhere_onnx/pubspec.yaml

@@ -1,6 +1,6 @@
 name: runanywhere_onnx
 description: ONNX Runtime backend for RunAnywhere Flutter SDK. On-device Speech-to-Text, Text-to-Speech, and Voice Activity Detection.
-version: 0.19.7
+version: 0.19.8
 homepage: https://runanywhere.ai
 repository: https://github.com/RunanywhereAI/runanywhere-sdks
 issue_tracker: https://github.com/RunanywhereAI/runanywhere-sdks/issues

sdk/runanywhere-kotlin/gradle.properties

@@ -60,4 +60,4 @@ runanywhere.coreVersion=0.1.4
 # Must match a GitHub release tag at: https://github.com/RunanywhereAI/runanywhere-sdks/releases
 # Contains: RACommons-android (librac_commons.so, librac_commons_jni.so)
 runanywhere.commonsVersion=0.1.4
-runanywhere.nativeLibVersion=0.19.7
+runanywhere.nativeLibVersion=0.19.8

sdk/runanywhere-react-native/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runanywhere-react-native-monorepo",
-  "version": "0.19.7",
+  "version": "0.19.8",
   "private": true,
   "description": "RunAnywhere React Native SDK - Multi-Package Monorepo",
   "workspaces": [