diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e3aa1d0..58ec095 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,9 +7,6 @@ updates:
       interval: "weekly"
       day: "monday"
     open-pull-requests-limit: 5
-    labels:
-      - "dependencies"
-      - "automated"
     commit-message:
       prefix: "chore"
       include: "scope"
@@ -24,6 +21,3 @@ updates:
     target-branch: "develop"
     schedule:
       interval: "weekly"
-    labels:
-      - "github-actions"
-      - "automated"
diff --git a/.github/workflows/cd-production.yml b/.github/workflows/cd-production.yml
index ae0855f..c658ff7 100644
--- a/.github/workflows/cd-production.yml
+++ b/.github/workflows/cd-production.yml
@@ -3,7 +3,6 @@ name: Deploy to Production
 on:
   push:
     branches: [main]
-  workflow_dispatch:
 
 env:
   NODE_VERSION: '20'
diff --git a/.github/workflows/preflight.yml b/.github/workflows/preflight.yml
new file mode 100644
index 0000000..49d7bf5
--- /dev/null
+++ b/.github/workflows/preflight.yml
@@ -0,0 +1,52 @@
+name: Preflight Release
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - develop
+      - main
+
+jobs:
+  preflight:
+    name: Preflight checks
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 22
+          cache: npm
+      - name: Install dependencies
+        run: npm ci
+      - name: Build packages
+        run: npm run build
+      - name: Type check
+        run: npm run type-check
+      - name: Lint
+        run: npm run lint
+      - name: Test
+        run: npm run test
+      - name: Pack publishable packages
+        run: |
+          npm -w packages/core pack
+          npm -w packages/cli pack
+          npm -w packages/plugins/markdown pack
+          npm -w packages/plugins/examples pack
+          rm -f opensyntaxhq-*.tgz
+      - name: Publish dry-run (requires NPM_TOKEN)
+        if: ${{ env.NPM_TOKEN != '' }}
+        env:
+          NODE_AUTH_TOKEN: ${{ env.NPM_TOKEN }}
+        run: |
+          npm config set //registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN
+          npm -w packages/core publish --dry-run
+          npm -w packages/cli publish --dry-run
+          npm -w packages/plugins/markdown publish --dry-run
+          npm -w packages/plugins/examples publish --dry-run
diff --git a/package-lock.json b/package-lock.json
index 46aceba..fc50adf 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7088,6 +7088,7 @@
       "version": "4.3.0",
       "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
       "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "color-convert": "^2.0.1"
@@ -7941,6 +7942,7 @@
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
       "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "color-name": "~1.1.4"
@@ -7953,6 +7955,7 @@
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
       "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/colorette": {
@@ -9406,6 +9409,7 @@
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
       "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -15218,6 +15222,7 @@
       "version": "7.2.0",
       "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
       "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "has-flag": "^4.0.0"
@@ -16928,7 +16933,7 @@
       "license": "Apache-2.0",
       "dependencies": {
         "@opensyntaxhq/autodocs-core": "^1.0.0",
-        "chalk": "^4.1.2",
+        "chalk": "^5.6.2",
         "chokidar": "^5.0.0",
         "commander": "^14.0.3",
         "cosmiconfig": "^9.0.0",
@@ -16953,22 +16958,6 @@
         "typescript": "^5.9.0"
       }
     },
-    "packages/cli/node_modules/chalk": {
-      "version": "4.1.2",
-      "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
-      "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==",
-      "license": "MIT",
-      "dependencies": {
-        "ansi-styles": "^4.1.0",
-        "supports-color": "^7.1.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/chalk?sponsor=1"
-      }
-    },
     "packages/core": {
       "name": "@opensyntaxhq/autodocs-core",
       "version": "1.0.0",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index a559346..635c228 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -28,7 +28,7 @@
   },
   "dependencies": {
     "@opensyntaxhq/autodocs-core": "^1.0.0",
-    "chalk": "^4.1.2",
+    "chalk": "^5.6.2",
     "chokidar": "^5.0.0",
     "commander": "^14.0.3",
     "cosmiconfig": "^9.0.0",