Repository navigation
fix: release clawock and clawock-dsh 0.4.3 - #3439
Merged
Merged
Conversation
Bump the Python package, the npm package and both lockfile version fields to 0.4.3, and add the consumer-facing changelog for the changes since 0.4.2 (DSH Workbench, dispatch API 7, shared-memory review gates, quote, brief and FX fixes). The npm job now publishes only through the package's trusted publisher: remove NODE_AUTH_TOKEN, pin npm 11.21.2 (trusted publishing needs >= 11.5.1), and strip setup-node's empty _authToken line so npm actually starts the OIDC exchange instead of sending an unauthenticated PUT. Document the npm trusted-publisher setup and the tokenless CI path. Refresh the npm README for the Workbench: name both DSH surfaces in the intro, merge the duplicate Workbench sections, replace the legacy chip wording, correct the read-only claim (the Workbench steers tasks through the ops entry), and point maintainers at the publish script instead of a bare npm publish.
shellcheck flags ${...} inside a single-quoted node -e as an unexpanded shell expression; use string concatenation so the JS guard is unambiguous.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release
clawockandclawock-dsh0.4.3 together.pyproject.toml, the pluginpackage.jsonand both root lockfileversion fields to 0.4.3; add the 0.4.3 changelog covering the DSH Workbench,
dispatch API 7, shared-memory review gates, and the quote/brief/FX fixes
since 0.4.2.
drop
NODE_AUTH_TOKEN, pin npm 11.21.2 (trusted publishing requiresdocs/operations/release.md.duplicate Workbench sections merged, legacy "chip" wording replaced, the
read-only claim corrected (the Workbench steers tasks through the ops entry),
and the maintainer publish path corrected to the publish script.
Validation:
tests/test_versions_agree.py,tests/test_github_release_contract.py,tests/test_publish_dsh_readback.pyand
tests/test_workflow_health.pypass locally (51 passed);ruff checkpasses on the changed test file;
python3 ops/publish/release_notes.py 0.4.3renders;
git diff --checkis clean. Full CI runs here.After the required checks pass: squash-merge, tag the merge commit
v0.4.3,push the tag, and verify the tag-triggered Release run publishes PyPI and npm
and creates the GitHub Release.