Skip to content

Auto-publish team plugin updates with unchanged permissions - #18

Merged
Fonlogen merged 1 commit into
mainfrom
claude/happy-franklin-1x3yaw
Oct 6, 2026
Merged

Fonlogen merged 1 commit into
mainfrom
claude/happy-franklin-1x3yaw

Conversation

@Fonlogen

@Fonlogen Fonlogen commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

What

  • sync.sh: a new version of a team plugin that adds no permissions (no new-permissions label) and is not the plugin's first version is committed straight to main, then Publish is started (gh workflow run, since GITHUB_TOKEN pushes don't trigger workflows). If main rejects the push it falls back to the usual PR. Community plugins, first versions and permission changes still go through a reviewed PR.
  • sync.yml: actions: write permission; repository_dispatch: plugin-release (already there) is now sent by the plugin release workflow.
  • regtool: carries the manifest platforms field into entries and the catalog, and checks it against the reviewed entry.
  • CORE_REF → v0.6.2, so manifests with platforms validate.
  • Docs: README (trust model, flow, REGISTRY_TOKEN, branch-protection bypass) and CONTRIBUTING.

Needs, once

  • Org secret REGISTRY_TOKEN (fine-grained, Ervisio/plugins, Contents: read & write) for instant pickup.
  • If main is protected: add GitHub Actions to the bypass list, otherwise auto updates fall back to PRs.

Checked: go vet / go test for regtool, shellcheck -x scripts/*.sh.

🤖 Generated with Claude Code

https://claude.ai/code/session_01YBUx1d4niJfMeuwPGpikuu


Generated by Claude Code

…nged

- sync.sh: team plugin, existing entry, no new-permissions label ->
  commit to main and start Publish; falls back to a pull request when
  main refuses the push
- regtool keeps the manifest's platforms (core 0.6.1) in entries and the catalog
- CORE_REF v0.6.2 so platforms and per-entry platforms validate
- docs: new release flow, REGISTRY_TOKEN, branch protection bypass

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YBUx1d4niJfMeuwPGpikuu
@Fonlogen
Fonlogen merged commit 18231cd into main Oct 6, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants