Release v0.5.0b2

[github-actions]

Release v0.5.0b2

Auto-generated by the Prepare Release workflow.

What changed

• de_shell/__init__.py bumped to 0.5.0b2 — the one place the version is
  written, and the value publish.yml refuses to let a tag disagree with
• Pre-flight checks passed: git dependencies pinned to SHAs or tags
• CHANGELOG.rst assembled from the fragments in upcoming_changes/

Release notes (as they will appear in `CHANGELOG.rst`)

0.5.0b2 (2026-10-14)
====================

Bug Fixes
---------

- A packaged app whose Python environment folder was left half-deleted now rebuilds it on the
  next launch, instead of failing at environment setup every time. (`#18 <https://github.com/directelectron/de-shell/pull/18>`_)
- The uninstaller now finds an app's Python environment when ``productName`` is set only in
  ``electron-builder.yml``. Before this it never offered to remove it, and the install sweep
  could miss a stray backend. Answering Yes now removes files with paths longer than 260
  characters too. (`#18 <https://github.com/directelectron/de-shell/pull/18>`_)

Review checklist

• CHANGELOG.rst reads well — edit the assembled text directly if needed
• Version is correct in de_shell/__init__.py
• CI passes — but note it does NOT start on its own here: GitHub suppresses
  workflow runs for events raised with GITHUB_TOKEN, so a PR opened by this
  workflow gets no pull_request run. Close and reopen the PR, or push an
  empty commit to it, to get one. The wheel-contents leg is the one that
  matters most: it fails if de_shell/js is missing, which is the whole
  point of the package.

Manual check CI cannot cover

CI never runs Electron — it typechecks the TypeScript and runs the node unit
tests, nothing more. Before tagging a release that touched the sidecar
protocol or de_shell/js:

• Link this tree into one app (python -m de_shell.js prints the path)
  and run that app's e2e suite against it.

After merging

Tag the merge commit on main — the tag MUST be exactly v0.5.0b2:

git fetch origin
git tag v0.5.0b2 origin/main
git push origin v0.5.0b2

The tag push triggers publish.yml: it refuses a tag that does not match
de_shell.__version__, builds the distributions, checks the wheel carries
de_shell/js, and uploads to PyPI through trusted publishing.

• Confirm it actually published before telling the apps to pin it:
  uv pip index versions de-shell should list 0.5.0b2.