From e04c604560f61fae033189edcdb9a4a982df76e7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Burak=20Emre=20Kabakc=C4=B1?= Date: Sun, 24 May 2026 15:37:46 +0100 Subject: [PATCH] fix(release): pass --manual-override-reason to ClawHub publish MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The `lobu` ClawHub slug has a trusted-publisher config, so ClawHub now rejects the scripted CLI publish of @lobu/openclaw-plugin with "Manual publishes for packages with trusted publisher config require manualOverrideReason" — which failed the 9.3.0 publish run's final [4/4] ClawHub step (npm side published fine). The synchronized npm + ClawHub release is driven by publish-packages.mjs from the OIDC release workflow, so pass that as the documented override reason. Verified with `clawhub package publish … --dry-run`. --- scripts/publish-packages.mjs | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/scripts/publish-packages.mjs b/scripts/publish-packages.mjs index b89d63468..f926916d3 100644 --- a/scripts/publish-packages.mjs +++ b/scripts/publish-packages.mjs @@ -237,6 +237,13 @@ async function publishToClawhub({ dir, clawhub }) { version, "--tags", "latest", + // The `lobu` ClawHub slug has a trusted-publisher config, so ClawHub + // treats this scripted CLI publish as a "manual" publish and requires an + // explicit override reason. The synchronized npm + ClawHub release is + // driven by this script (publish-packages.mjs) from the OIDC release + // workflow, so document that as the override reason. + "--manual-override-reason", + "synchronized npm + ClawHub release via scripts/publish-packages.mjs (publish-packages.yml)", "--source-repo", CLAWHUB_SOURCE_REPO, "--source-commit",