diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
new file mode 100644
index 0000000..ef785c7
--- /dev/null
+++ b/.github/workflows/publish.yaml
@@ -0,0 +1,14 @@
+# A CI configuration to auto-publish pub packages.
+
+name: Publish
+
+on:
+  pull_request:
+    branches: [ master ]
+  push:
+    tags: [ 'v[0-9]+.[0-9]+.[0-9]+*' ]
+
+jobs:
+  publish:
+    if: ${{ github.repository_owner == 'dart-lang' }}
+    uses: devoncarew/firehose/.github/workflows/publish.yaml@main
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 78adc8d..94c7c5a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,4 +1,4 @@
-## 2.3.2-dev
+## 2.3.2
 
 * Require Dart 2.18
 
diff --git a/README.md b/README.md
index 2e09013..33c2b00 100644
--- a/README.md
+++ b/README.md
@@ -377,6 +377,7 @@ class StashCommand extends Command {
 ```
 
 ### Default Help Command
+
 [CommandRunner][] automatically adds a `help` command that displays usage
 information for commands, as well as support for the `--help` flag for all
 commands. If it encounters an error parsing the arguments or processing a
@@ -442,6 +443,26 @@ The resulting string looks something like this:
       [ia32]      Intel x86
 ```
 
+## Contributions, PRs, and publishing
+
+When contributing to this repo:
+
+- if the package version is a stable semver version (`x.y.z`), the latest
+  changes have been published to pub. Please add a new changelog section for
+  your change, rev the service portion of the version, append `-dev`, and update
+  the pubspec version to agree with the new version
+- if the package version ends in `-dev`, the latest changes are unpublished;
+  please add a new changelog entry for your change in the most recent section.
+  When we decide to publish the latest changes we'll drop the `-dev` suffix
+  from the package version
+- for PRs, the `Publish` bot will perform basic validation of the info in the
+  pubspec.yaml and CHANGELOG.md files
+- when the PR is merged into the main branch, if the change includes reving to
+  a new stable version, a repo maintainer will tag that commit with the pubspec
+  version (e.g., `v1.2.3`); that tag event will trigger the `Publish` bot to
+  publish a new version of the package to pub.dev
+
+
 [posix]: https://pubs.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap12.html#tag_12_02
 [gnu]: https://www.gnu.org/prep/standards/standards.html#Command_002dLine-Interfaces
 [ArgParser]: https://pub.dev/documentation/args/latest/args/ArgParser/ArgParser.html
diff --git a/pubspec.yaml b/pubspec.yaml
index e99e29b..589a067 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -1,5 +1,5 @@
 name: args
-version: 2.3.2-dev
+version: 2.3.2
 description: >-
  Library for defining parsers for parsing raw command-line arguments into a set
  of options and values using GNU and POSIX style options.