gnezim/clawsec
1
0
Fork 0
mirror of https://github.com/prompt-security/clawsec.git synced 2026-06-23 10:21:21 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(release): update ClawHub slug pipeline deps (#277)

Browse Source 
* fix(release): update clawhub slug pipeline deps

* fix(release): bump clawhub cli undici lock

* fix(release): guard clawhub publish slug

* fix(release): keep suite slug releasable

* fix(release): harden clawhub slug guard

* fix(release): pass clawhub registry to slug guard
This commit is contained in:
davida-ps
2026-06-22 23:45:24 +03:00
committed by GitHub
parent f937384104
commit de28dadd39
6 changed files with 293 additions and 80 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/clawhub-cli/package-lock.json
Generated
+3 -3
View File
@@ -384,9 +384,9 @@
}
},
"node_modules/undici": {
"version": "7.27.2",
"resolved": "https://prompt-security-443370709039.d.codeartifact.eu-north-1.amazonaws.com/npm/npm-proxy/undici/-/undici-7.27.2.tgz",
"integrity": "sha512-uZsKNuzQxDMUY6M3pIMvy5tvlGmtq8XJ2oLAkfRKGNu+1VQAIvLy2xIVG5ATZl5wDXl/tddByAWCizRbOme+TA==",
"version": "7.28.0",
"resolved": "https://prompt-security-443370709039.d.codeartifact.eu-north-1.amazonaws.com/npm/npm-proxy/undici/-/undici-7.28.0.tgz",
"integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==",
"engines": {
"node": ">=20.18.1"
}
.github/workflows/skill-release.yml
+25 -2
View File
@@ -1717,7 +1717,7 @@ jobs:
run: bash scripts/ci/install_clawhub_cli.sh
- name: Patch clawhub publish payload workaround
# Temporary: clawhub@0.7.0 publish payload is missing acceptLicenseTerms.
# Idempotent compatibility guard: older clawhub@0.7.0 builds omitted acceptLicenseTerms.
if: needs.release-tag.outputs.publish_clawhub == 'true' && env.CLAWHUB_TOKEN != ''
run: node scripts/ci/patch_clawhub_publish_payload.mjs
@@ -1732,6 +1732,18 @@ jobs:
CLAWHUB_DISABLE_TELEMETRY=1 CLAWHUB_SITE="$SITE" CLAWHUB_REGISTRY="$REGISTRY" \
clawhub login --token "$CLAWHUB_TOKEN" --site "$SITE" --no-input
- name: Guard ClawHub slug ownership
if: needs.release-tag.outputs.publish_clawhub == 'true' && env.CLAWHUB_TOKEN != ''
run: |
set -euo pipefail
SITE=${CLAWHUB_SITE:-https://clawhub.ai}
REGISTRY=${CLAWHUB_REGISTRY:-$SITE}
export CLAWHUB_CONFIG_PATH="$HOME/.clawhub-ci/config.json"
export CLAWHUB_SITE="$SITE"
export CLAWHUB_REGISTRY="$REGISTRY"
bash scripts/ci/guard_clawhub_slug_owner.sh \
"${{ needs.release-tag.outputs.clawhub_slug }}"
- name: Guard duplicate ClawHub version
if: needs.release-tag.outputs.publish_clawhub == 'true' && env.CLAWHUB_TOKEN != ''
run: |
@@ -1872,7 +1884,7 @@ jobs:
run: bash scripts/ci/install_clawhub_cli.sh
- name: Patch clawhub publish payload workaround
# Temporary: clawhub@0.7.0 publish payload is missing acceptLicenseTerms.
# Idempotent compatibility guard: older clawhub@0.7.0 builds omitted acceptLicenseTerms.
run: node scripts/ci/patch_clawhub_publish_payload.mjs
- name: Login to ClawHub
@@ -1890,6 +1902,17 @@ jobs:
CLAWHUB_DISABLE_TELEMETRY=1 CLAWHUB_SITE="$SITE" CLAWHUB_REGISTRY="$REGISTRY" \
clawhub login --token "$CLAWHUB_TOKEN" --site "$SITE" --no-input
- name: Guard ClawHub slug ownership
run: |
set -euo pipefail
SITE=${CLAWHUB_SITE:-https://clawhub.ai}
REGISTRY=${CLAWHUB_REGISTRY:-$SITE}
export CLAWHUB_CONFIG_PATH="$HOME/.clawhub-ci/config.json"
export CLAWHUB_SITE="$SITE"
export CLAWHUB_REGISTRY="$REGISTRY"
bash scripts/ci/guard_clawhub_slug_owner.sh \
"${{ steps.publishable.outputs.clawhub_slug }}"
- name: Publish to ClawHub
run: |
set -euo pipefail