diff --git a/.github/workflows/plugin-npm-release.yml b/.github/workflows/plugin-npm-release.yml index 9408c141857b..e810d8684b16 100644 --- a/.github/workflows/plugin-npm-release.yml +++ b/.github/workflows/plugin-npm-release.yml @@ -1361,7 +1361,7 @@ jobs: scripts/lib/tsx-cli-shim.mjs \ .publication-target/scripts/lib/tsx-cli-shim.mjs - - name: Setup OIDC publication target + - name: Setup trusted OIDC packaging dependencies if: steps.publication_evidence.outputs.publish_route == 'npm-oidc' uses: ./.github/actions/setup-node-env with: diff --git a/docs/reference/RELEASING.md b/docs/reference/RELEASING.md index 845c050ca6f6..793b6ca08c9a 100644 --- a/docs/reference/RELEASING.md +++ b/docs/reference/RELEASING.md @@ -561,24 +561,6 @@ gh workflow run openclaw-release-publish.yml \ Include `plugin_sdk_api_acknowledgement` only when the npm preflight's Plugin SDK API report contains changes. -If a beta package is already published but its container images are missing, -do not rerun npm or plugin publication. Reuse the immutable beta tag plus its -successful npm preflight and Full Release Validation evidence through the -Docker-only recovery path. The workflow rechecks the exact npm version, the -`beta` selector, and the published tarball digest before building containers: - -```bash -gh workflow run openclaw-release-publish.yml \ - --ref main \ - -f tag=vYYYY.M.PATCH-beta.N \ - -f preflight_run_id= \ - -f full_release_validation_run_id= \ - -f full_release_validation_run_attempt= \ - -f npm_dist_tag=beta \ - -f publish_openclaw_npm=false \ - -f publish_docker_only=true -``` - Stable publish to the default beta dist-tag: ```bash diff --git a/test/scripts/package-acceptance-workflow.test.ts b/test/scripts/package-acceptance-workflow.test.ts index ce2cc3af99f5..9e74f8c05dbc 100644 --- a/test/scripts/package-acceptance-workflow.test.ts +++ b/test/scripts/package-acceptance-workflow.test.ts @@ -1524,7 +1524,7 @@ describe("package acceptance workflow", () => { expect(verifyStep.run).not.toContain("npm view openclaw@extended-stable version"); }); - it("accepts only exact protected SHA-pinned release publish tags", () => { + it("accepts only main-reachable protected SHA-pinned release publish tags", () => { const workflowSha = "a".repeat(40); const binDir = tempDirs.make("release-publish-gh-"); const ghPath = `${binDir}/gh`;